Stop Certain user accounts logging onto pc??

Gryzor

hi

is there any way to stop certain domain accounts logging onto an xp machine.

I want to allow normal user accounts to log onto the machine, but block a few "shared logins" i have.


thanks!!

Stephen

Disable or delete the accounts you don't want to get access.

start->run->compmgmt.msc

edit: erk, didn't notice the domain bit above. in that case... no idea

Capt'n Midnight

in user manager on NT4 domains you can set users so they can only logon from a list of up to 8 PC's (though probobal y does not applhy tp wi 95/98 clients)

again in NT on the local machine the are advanced rights including "log on locally" - could not be arsed trying to figure where it's moved in 2k/xp pro since they have probably renamed it too.

If you have XP Home M$marketing have caused domain interaction to be hamstrung (and I suspect it's affecting XP pro too... )

ChipZilla

Umm, there's nothing wrong with XP Pro machines on a domain.

Gryzor, You can restrict the machines the user account logs onto in AD. Remember to delete the profile off the machine or the user can just pull the network cable out of the back and log in locally.

Capt'n Midnight

Originally posted by ChipZilla
Umm, there's nothing wrong with XP Pro machines on a domain.

Then why is only XP PRO machines won't run the NT login scripts on first logon - even win95 does, XP home aint supposed to.

BTW: technet says it may be caused by a slow connection - we've had the problem at 10Mb/100Mb and 1GB

ChipZilla

That's policies (or lack of them) for you.

Gryzor

Originally posted by ChipZilla
Umm, there's nothing wrong with XP Pro machines on a domain.

Gryzor, You can restrict the machines the user account logs onto in AD. Remember to delete the profile off the machine or the user can just pull the network cable out of the back and log in locally.

knew i'd seen that somewhere before!!!.....think that only allows u to specify what machines an account can logon to rather than which ones it can't.

i thought it would have been easy enough through the local computer policy to restrict a certain account from logging on....maybe not!!

ChipZilla

Quite right Gryzor - you can only allow, not deny.

Looks like it's policy editing time so... I think it;s 'Windows Settings' -> 'Security Settings' -> 'Local Policies', and then either 'User Rights' or 'Security'

Gryzor

Originally posted by ChipZilla
Quite right Gryzor - you can only allow, not deny.

Looks like it's policy editing time so... I think it;s 'Windows Settings' -> 'Security Settings' -> 'Local Policies', and then either 'User Rights' or 'Security'

yeah tried that earlier...only saw a "Deny Logon Locally" option...feckin windoze..:mad: