How can we keep Users from loggin onto a specific computer

[timlau]

Is there a way in 2000 Server to keep specific users from loging on to a specific computer on the network. I know in Active Directory we can limit users to logon to specific computers. But there are some users that are able to logon to any computer. (Well except the 1 computer that we don't want them to log on to) My whole point is there a setting under Active Directory to only allow 1 person to logon to this computer? I know I could go under the properties under each user and type in the computer names of the computers that they can login to. But that would take too much time for 200+ Users and 100+ Computers. Is there a way? I hope this is clear. If not let me know.
Thanks,
timlau

 

[timlau]

Any Ideas?? timlau

 

[GiaBetiu]

Use group policy objects (GPO). Then you can assign that policy to computers that you want. In the GPO you can customize who do you want to have "log on locally" right.
If is just about one computer, do this via Local Policy.

path:
computer configuration/Windows settings/Security settings/Local Policies/User rights assignment/logon localy Gia Betiu
giabetiu@chello.nl
Computer Eng. CNE 4, CNE 5, MCSE Win2K