Restrict a Domain workstation to login with a specific account

[maxrebo]

Is there a way to do this?

I know there's a way to restrict a user to login only to a specific workstation, but I want to do it the other way round.

 

Thanks

[DavR]

I'm not sure I entirely follow your usage, but, the way we do it here is to block the Students group from logging on to certain workstations.

 

This is in GP under Computer | Windows Settings | Security Settings | Local Policies | User Rights Assignment | Deny log on locally. We then apply this GPO to only the workstation we want.

 

Under the same page is 'Allow logon locally' which can be used to specify a list of who can log on to the workstation. I've not used it myself, though.

[maxrebo]

I'm not sure I entirely follow your usage, but, the way we do it here is to block the Students group from logging on to certain workstations.

 

This is in GP under Computer | Windows Settings | Security Settings | Local Policies | User Rights Assignment | Deny log on locally. We then apply this GPO to only the workstation we want.

 

Under the same page is 'Allow logon locally' which can be used to specify a list of who can log on to the workstation. I've not used it myself, though.

That's done the trick, thanks

[DavR]

Great, nice easy one!