How would we go about preventing certain students from being able to log on in certain rooms for disciplinary reasons ? Would we use the OUs in Active Directory ? Scripts, policies - don't know where to start.
Printable View
How would we go about preventing certain students from being able to log on in certain rooms for disciplinary reasons ? Would we use the OUs in Active Directory ? Scripts, policies - don't know where to start.
GPO computer OU level policy under Computer Settings there is a security settings -> Rights Assignment container (something like that I will have to check when I get on the domain)
Under their there is an item to specify whether local logon is allowed
Just got on the server now:
Group Policy (computer OU you wish to apply restrictions to)
Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> User Rights Assignment
Under this the item you want is Deny log on locally then just add your banned users group in here and it will do the trick.
Well after 90 minutes (gp refresh interval) or a restart of the workstations or a forced gpupdate /force on the stations if you want immediate application.
Thanks, I'll try it on Monday.