Restrict Logon

[DSapseid]

Hi

 

I am running one network here for both curriculmn and admin and recently ihave noticed kids using the teachers laptops - which i have gone spare about as if they are clever they can open some of the SIMS files in excel!!

 

Anyway back to the point. I want to restrict who can logon to the admin machines. i.e. only users a member of 'All Staff' can access the staff laptops.

 

I swear i have seen this somewhere but cant for the life of me remember where!!

 

Cheers

 

Dan

[Geoff]

You need to change which users/groups have 'Interactive logon' rights to the machine(s).

[Midget]

Why doesn't your student's GP block access to the C Drive, the Run command and CMD? If that was in place, even if they did use the laptop they wouldnt be able to get anywhere

[DSapseid]

You need to change which users/groups have 'Interactive logon' rights to the machine(s).

 

How do i do this?? Sorry for being dumb :oops:

 

Why doesn't your student's GP block access to the C Drive, the Run command and CMD? If that was in place, even if they did use the laptop they wouldnt be able to get anywhere

 

It is but im sure one of the brighter kids could still find a way of doing it!!!

[Geoff]

How do i do this?? Sorry for being dumb

 

It's in the local security policy settings.

[DSapseid]

Sorry i still cant find what options i need to do if someone could give me a step by step guie as to how to only let 'All staff' logon and 'All students' not it would be greately appreciated. 8)

[Geoff]

It's a machine setting in:

 

Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment

 

Add the users or groups you wish to deny logins to the 'Deny local logins' policy setting.

[DSapseid]

Geoff your a star Many Thanks 8)