Log on interactively..

[redman71]

Is there a way to set permission to log on interactively with GPO?

thanks

 

[wolluf]

You can specify users/groups who are allowed or denied from logging on locally (under computer config, windows settings, secuity settings, local policies, user rights assignment, runing gpedit.msc or run secpol.msc for more direct access). Not sure if this is what you mean.

 

[redman71]

thanks...somewhat, however I only want users that are supposed to logon to their specific machines. If I do this globally, then any user on the domain can access any other computer if they know its IP.

 

[wolluf]

you can also set deny access to this computer from the network. Are you trying to restrict access to each machine, both locally and over the network to an 'authorised' user (and presumably administrators?)

 

[redman71]

Yes