+ Post New Thread
Results 1 to 4 of 4
Learning Network Manager Thread, Allow specific users to login on a computer in Technical; We are using AD 2008 and have three categories of users Faculty Staff Students All three categories have different privileges ...
  1. #1

    Join Date
    Jan 2011
    Posts
    67
    Thank Post
    34
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Allow specific users to login on a computer

    We are using AD 2008 and have three categories of users
    Faculty
    Staff
    Students

    All three categories have different privileges

    I have smart classrooms and all computers in those rooms are connected to the domain
    I want only category "Faculty" to be authenticated on those computers and must not allow any users in the category of
    Staff or Students
    to login to those machines.
    How can i do it ? what changes can i make on client machine or domain

    thanks

  2. #2
    ass17's Avatar
    Join Date
    Feb 2013
    Posts
    319
    Thank Post
    5
    Thanked 35 Times in 34 Posts
    Rep Power
    25
    First of all in "Active Directory Users & Computers" arrange your computers into groupings (Organisation Units).

    Then open "Group Policy Management" and create a new policy for the Users that will be for Restricted Logons to specific machines.

    Right click to Edit the new policy.

    Open Computer Configuration > Policies > Window Settings > Security Settings > Local Policies > User Rights Assignment

    Open the "Deny log on locally" policy and add the groups you wish to deny.

    Close the policy

    Attach/Link the new Restricted Logon policy to all the Organisational Units you created for your computers that you wish to apply the policy to.

    Don't worry about the policy been referred as local logins, it works.

  3. Thanks to ass17 from:

    karan_jhr (24th April 2014)

  4. #3
    p858snake's Avatar
    Join Date
    Dec 2008
    Location
    Queensland
    Posts
    1,490
    Thank Post
    37
    Thanked 175 Times in 151 Posts
    Blog Entries
    2
    Rep Power
    51
    Is there any specific reason you are wanting to do this? It can cause hassles in the future.

  5. #4

    Join Date
    Jan 2011
    Posts
    67
    Thank Post
    34
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    i want to save the SmartClassroom pc from students. The create lots of problems

SHARE:
+ Post New Thread

Similar Threads

  1. shared folder "user not allowed to login at this computer"
    By chazzy2501 in forum Windows Server 2008
    Replies: 0
    Last Post: 24th February 2014, 03:44 PM
  2. Allow Domain Users to Install Software locally on their computers
    By CommodoreS in forum Windows Server 2008
    Replies: 2
    Last Post: 18th September 2012, 11:21 AM
  3. Replies: 17
    Last Post: 10th October 2008, 03:34 PM
  4. Permitting only one user to log on to a workstation
    By ctbjs in forum How do you do....it?
    Replies: 8
    Last Post: 5th September 2007, 03:27 PM
  5. Only allow certain users to log on to a machine?
    By wesleyw in forum How do you do....it?
    Replies: 7
    Last Post: 16th January 2006, 11:38 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •