+ Post New Thread
Results 1 to 9 of 9
Windows Thread, restricting who can log on to a certain machine in Technical; Got a machine in a room thats unstaffed most of the time. Is there any way to restrict which users ...
  1. #1

    RabbieBurns's Avatar
    Join Date
    Apr 2008
    Location
    Sydney
    Posts
    5,532
    Thank Post
    1,341
    Thanked 470 Times in 307 Posts
    Blog Entries
    6
    Rep Power
    200

    restricting who can log on to a certain machine

    Got a machine in a room thats unstaffed most of the time.

    Is there any way to restrict which users are able to log on to that particular machine?

  2. #2

    Join Date
    Jul 2007
    Location
    Nottingham
    Posts
    199
    Thank Post
    19
    Thanked 7 Times in 7 Posts
    Rep Power
    17
    If its 2000/XP/Vista you could set the 'Deny Logon Locally' to those who you need to deny.

  3. #3

    elsiegee40's Avatar
    Join Date
    Jan 2007
    Location
    Kent
    Posts
    10,188
    Thank Post
    1,923
    Thanked 2,413 Times in 1,767 Posts
    Rep Power
    840
    Unfortunately, it's been designed so that you have explicitly prevent individuals from logging on (i.e. you'd have to nominate nearly every user) rather that having a global deny and then enabling one or two people...

    it's a pain!

  4. #4

    RabbieBurns's Avatar
    Join Date
    Apr 2008
    Location
    Sydney
    Posts
    5,532
    Thank Post
    1,341
    Thanked 470 Times in 307 Posts
    Blog Entries
    6
    Rep Power
    200
    Thanks for the replies.

    Im trying to deny everyone except 2 teachers heh

    Can it be done by groups? i.e could I just deny the "students" group?

  5. #5
    DMcCoy's Avatar
    Join Date
    Oct 2005
    Location
    Isle of Wight
    Posts
    3,505
    Thank Post
    10
    Thanked 508 Times in 445 Posts
    Rep Power
    116
    Quote Originally Posted by rreynolds24 View Post
    Thanks for the replies.

    Im trying to deny everyone except 2 teachers heh

    Can it be done by groups? i.e could I just deny the "students" group?
    yes, you can just deny the students group in the "deny logon locally" option in group policy.

  6. #6

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    11,271
    Thank Post
    884
    Thanked 2,749 Times in 2,322 Posts
    Blog Entries
    11
    Rep Power
    785
    There is a way to do this that will allow you to just let those two teachers on and block everyone else without massive effort.

    First create a security group with your two teachers in it. Then chuck the machine into its own OU under where it is at the moment in AD and add a new group policy object to that OU. Inside that group policy you want to go to:

    Computer Configuration> Windows Settings> Security Settings> Local Policies> User Rights Assignment: Log on locally

    Then remove the Users group and the add the group that you created earlier. This will let your two teacher log on and also allow administrators to in case they/you need to fix something.

    Have this setup in our school office to stop teachers messing with the reception computers.

  7. Thanks to SYNACK from:

    RabbieBurns (2nd May 2008)

  8. #7
    altecsole's Avatar
    Join Date
    Jun 2005
    Location
    Whittington, Lancashire
    Posts
    286
    Thank Post
    40
    Thanked 37 Times in 27 Posts
    Rep Power
    26
    You could put a batch file in the all user startup script that checks the logged on users username and logs them off if they're not in the list:

    Code:
    @echo off
    if %username%==john exit
    if %username%==jim exit
    if %username%==peter exit
    if %username%==ken exit
    shutdown -l

  9. #8

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    11,271
    Thank Post
    884
    Thanked 2,749 Times in 2,322 Posts
    Blog Entries
    11
    Rep Power
    785
    Quote Originally Posted by altecsole View Post
    You could put a batch file in the all user startup script that checks the logged on users username and logs them off if they're not in the list:

    Code:
    @echo off
    if %username%==john exit
    if %username%==jim exit
    if %username%==peter exit
    if %username%==ken exit
    shutdown -l
    Thats a good idea too, I would put it in the logon script though as you can disable the startup items by holding down the shift key while you log in.

    Troubleshooting the Startup Process
    Disabling Startup Programs by Using the SHIFT Key
    One way to simplify your configuration is to disable startup programs. Hold down the SHIFT key during the logon process to prevent the operating system from running startup programs or shortcuts in the following folders:

    systemdrive\Documents and Settings\Username\Start Menu\Programs\Startup

    systemdrive\Documents and Settings\All Users\Start Menu\Programs\Startup

  10. #9

    RabbieBurns's Avatar
    Join Date
    Apr 2008
    Location
    Sydney
    Posts
    5,532
    Thank Post
    1,341
    Thanked 470 Times in 307 Posts
    Blog Entries
    6
    Rep Power
    200
    Quote Originally Posted by SYNACK View Post
    There is a way to do this that will allow you to just let those two teachers on and block everyone else without massive effort.

    First create a security group with your two teachers in it. Then chuck the machine into its own OU under where it is at the moment in AD and add a new group policy object to that OU. Inside that group policy you want to go to:

    Computer Configuration> Windows Settings> Security Settings> Local Policies> User Rights Assignment: Log on locally

    Then remove the Users group and the add the group that you created earlier. This will let your two teacher log on and also allow administrators to in case they/you need to fix something.

    Have this setup in our school office to stop teachers messing with the reception computers.
    spot on. just what i was after. cheers!



SHARE:
+ Post New Thread

Similar Threads

  1. Restricting Internet Access..? How
    By Grommit in forum Windows
    Replies: 24
    Last Post: 21st April 2008, 02:30 PM
  2. Restricting MMC.
    By boomam in forum Windows
    Replies: 29
    Last Post: 10th January 2008, 08:30 PM
  3. Restricting Logons
    By Espada in forum Windows
    Replies: 2
    Last Post: 6th December 2007, 06:51 PM
  4. Restricting RIS
    By beast_gts in forum Windows
    Replies: 3
    Last Post: 28th June 2007, 10:26 PM
  5. restricting logical access
    By strawberry in forum Windows
    Replies: 1
    Last Post: 30th April 2007, 10:30 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •