Limit access to a machine

[LeonBar]

I have a domain (win server 2K) with 100 users, and 25 computers (win2K workstation) all with roming profiles. I would like to limit the access to one specific machine to only 3 users. special programs on that machine I don't want anyone else logging in to. Is there an easy way to do this.

thanks
Leon

 

[mrmoneymatters]

Yes, not hard either. Open the local group policy on the machine you want restricted, go to run, type mmc then enter, file - select add snap in, add, then group policy, add, then confirm for local machine, finish.

Go to computer settings, Windows, security, local policies, user rights assignment, select allow logon locally, then remove everyone expect for administrators. Now at this point nobody except admins can log on to this machine.

In AD create a security group, add those three users that will be allowed to log on to the machine to that security group. On that machine, where you removed everyone except for the admins, add the security group you created.

Network Admin
A+, Network+, MCSA 2000, MCSE 2000

 

[LeonBar]

Thanks mrmoneymatters
That was exactly what I needed. Thank you very much. It worked perfectly.


Leon