Limit Users that can Logon to a Specific WorkStation 1

[KRPGroup]

I have a computer that will be shared by the office that is connected to a dedicated scanner. I am using a Generic logon name so that staff do not have to logon each time they want to use the scanner.

I have set the Generic User to only be allow to logon to this scanner workstation but I would also like to make sure no other domain user can logon to this workstation with their regular UserName. Is this possible.??

 

[mrmoneymatters]

Yes, change the local security policy. Where it has the allow logon locally, remove all users except for the domain admins and the specific user account. If you don't know what I am talking about, just reply and I will give the instructions.

Network Admin
A+, Network+, MCSA 2000, MCSE 2000

 

[KRPGroup]

Thanks.. I can will set this in the GPO I made for the computer under Cmp Cfg->Win Settings->Security Setting->Local Policies->User Rights..->Log on locally

Are there any other groups besides domain admins that should be considered eg some of the builtin groups.. I was just reading the MS article

http://support.microsoft.com/kb/823659

 

[Live2Die]

COuld you not also set in the local policy, Deny Logon to the network.

--------------------
Sometimes overlooking the little things causes headaches that are unneeded

 

[mrmoneymatters]

You will probably have administrators (which your domain admins is included in), power users, guests, users, backup operators.

If all you are doing is using this machine for scanning you should be able to remove all but the admins and the user you want.

If you want you could always just remove the users group.

Network Admin
A+, Network+, MCSA 2000, MCSE 2000