+ Post New Thread
Results 1 to 3 of 3
Network and Classroom Management Thread, Restrict a network workstation to just staff in Technical; I want the workstation ion the teachers desk only to allow logons from staff not students. How do I do ...
  1. #1

    Join Date
    Apr 2008
    Location
    Lincs
    Posts
    3
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Restrict a network workstation to just staff

    I want the workstation ion the teachers desk only to allow logons from staff not students. How do I do this please. WIndows Server 2003 and XP Pro on the desktops.

    Thank you
    Microcosm

  2. #2

    Join Date
    Dec 2006
    Location
    US
    Posts
    296
    Thank Post
    62
    Thanked 16 Times in 15 Posts
    Rep Power
    17
    Assuming the computer is on a domain...

    Create a separate sub-OU for the workstation and create a new group policy object for this OU.

    Then, open group policy management console on the Windows 2003 server and go to Computer Configuration > Windows Settings > Security Settings > Local Policies > User Rights Assignment. Double click on the "Deny Logon Locally" setting.

    Add all user groups except administrators and staff to this list.

    Hope this helps.

  3. #3

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    10,684
    Thank Post
    823
    Thanked 2,570 Times in 2,187 Posts
    Blog Entries
    9
    Rep Power
    731
    There is a way to do this that will allow you to just let the teachers on and block everyone else without needing to specify each group individually.

    Make sure you have a security group with your teachers in it. Then chuck the machine into its own OU under where it is at the moment in AD and add a new group policy object to that OU. Inside that group policy you want to go to:

    Computer Configuration> Windows Settings> Security Settings> Local Policies> User Rights Assignment: Log on locally

    Then remove the Users group and the add the group that you created earlier. This will let your two teacher log on and also allow administrators to in case they/you need to fix something.

    Have this setup in our school office to stop teachers messing with the reception computers.

    Adapted from: restricting who can log on to a certain machine

SHARE:
+ Post New Thread

Similar Threads

  1. Replies: 28
    Last Post: 15th August 2010, 09:47 AM
  2. Restrict Logon
    By DSapseid in forum Wireless Networks
    Replies: 7
    Last Post: 28th March 2007, 10:30 AM
  3. Restrict filetypes
    By Gatt in forum How do you do....it?
    Replies: 21
    Last Post: 22nd September 2006, 11:28 AM
  4. Staff laptops: Letting 'em install network software
    By eean in forum How do you do....it?
    Replies: 3
    Last Post: 13th September 2006, 08:08 PM
  5. Restrict where staff can install from
    By daverage in forum Wireless Networks
    Replies: 13
    Last Post: 24th November 2005, 08:33 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •