Deny Logon

[kevin_lane]

I’m wanting to deny all pupils to logon to staff laptops now I’m testing a user and have added it to the deny logon locally but my test student is still able to log on, has anyone tried anything similar to this.

[kevin_lane]

sorted

[jdoldridge]

How did you do this may I ask? Trying to work this one out myself...

[RichCowell]

I used to do it with a bit in the logon script, but can't remember for the life of me how... I'd really like to do it again!

 

It was based on the machine name, so if machine name = lap* then log off...

 

Really wish I'd brought it from my previous school!

[kevin_lane]

i created my test ou with block inheritance on then created the gpo and under computer config > security > Local Policies/User Rights Assignmenthide > Policy Setting Deny log on locally ######\Pupils

 

at this point both the computer and the user was in the same ou i tested it with another user account side of that ou and still works

 

hope this helps

[jdoldridge]

Great Thanks!