Local User Security 1

[rdrunner40]

Hi,

I have a PC running XP PRO SP2 and i am setting it up to be a member of the Domain called LOCAL.

I would like this PC to be able to be only used by members of a Group called Graphics to which i assign members from the domain.

I am able to do the above .. my question is how do i stop other users who are not members of the Graphics Group to deny access to the PC ... is there a policy that i can enable.

Any help or ideas are gratefully received.

regards

Murray

 

[JimmyZ1]

once the machine is in the domain, if they don't have rights assigned on the machine they shouldn't be able to login, just make sure you don't have them as users on the machine in question and even if they t ry to login they should get denied

 

[rdrunner40]

Hi,

Please explain rights assigned on the machine.

Under our current network setup all members of the domain are able to logon to any PC .... our do i restrict the users only of the Graphics group to be able to logon only to this pc.

Is the graphics group made on the local pc or in the domain and will it be a security group ?

regards,

murray

 

[acl03]

You can use group policy to limit who can log onto a machine. Do you use group policy? This can be done using Domain GPO's, or local group policy.

To get to local group policy, hit start, run, type GPEDIT.MSC

Once in G.P. browse to:

Computer Configuration
Windows Settings
Security Settings
Local Policies
User Rights Assignment

Look in the right pane, and double-click "Log on locally"

I believe that is the list of users that are allowed to log onto that machine.

Note that there is also a "Deny log on locally" setting as well.

Hope that helps.

-Andrew



Thanks,
Andrew

 

[acl03]

By the way, make sure you do NOT remove the Administrators group from the Log on locally setting.



Thanks,
Andrew