how can i stop some users loging on to a computer

[marktoulson]

in our school we have a couple of machines in the libary that run all the libary programs the machines are networked so the librarian can check emails and that sort of thing. is there a way of stoping other users loging oo to the network so that only the librarains and administrations can login without fear of the kids killing the machine again

[maniac]

You can indeed using good old group policy.

 

Look in Computer config, Windows Settings, Security Settings, Local Policies, user rights assignment.

 

Look down the list for the "logon Locally" section and add a group containing the users who you want to allow access to log onto the machine. This will over write any existing settings on the machine, so will then only allow those users to logon.

 

You can do it in reverse as well.

 

look down the list for for "Deny Logon Locally" and add a group to this section that contains all the users you don't want to be able to logon to the machine.

 

Either way will work, I do this to staff laptops to stop students logging onto them, and to student machines to stop staff using them. works a treat!

 

Mike.