Denny logon to domain 2

[debcu]

Hi,
my server is on domain. I want to denny logon to domain for all domain users. Only local administrator could logon to this server. Can you help me?

 

[TechyMcSe2k]

Take it off the domain.

 

[debcu]

It must be in domain because sharing autenthification is basing on AD accounts (no local users)

 

[wosie]

i thought with default only admins can login

 

[TechyMcSe2k]

Open Local Security Policy and Local Policies\Deny Logon Locally and add domain users. If you don't want Domain Admins in there either - remove them fom the administrators group or put them in the local policy too.

 

[mrdenny]

Open Local Security Policy and Local Policies\Deny Logon Locally and add domain users.

If you do that no domain users will be able to log into the machine. That includes the administrators.

In the local security policy under "Local Policies" >
User Rights Assignments" edit the "Allow logon locally" right and remove the Users group.

Denny
MCSA (2003) / MCDBA (SQL 2000)
MCTS (SQL 2005 / Microsoft Windows SharePoint Services 3.0: Configuration / Microsoft Office SharePoint Server 2007: Configuration)
MCITP Database Administrator (SQL 2005) / Database Developer (SQL 2005)

My Blog