Limit access to a computer in AD

[arighi71]

I have a computer that is part of the active directory system that is be managed by server2003. I would like to limit the user access to a certain desktop to only users that are part of a certain group. Where would I go to make the system changes so that I can limit access to a group within AD?

Thanks.

 

[Stevehewitt]

Go to the workstation and use the Computer Config in the local GPO. Under security settings look for "allow log on locally". Keep in administrators (both domain and local!), remove domain users and add in the group you want to allow access too.



Steve.

"They have the internet on computers now!" - Homer Simpson

 

[TheLad]

Alternatively, move the Computer Object to a new OU and do the above procedure using a Group Policy applied to the new OU rather than using a local policy.

--------------------------------------
"Insert funny comment in here!"
--------------------------------------

 

[arighi71]

Tried to setup the computer to do this via the OU and setting the group policy, but it is not working. I would love to do this from active directory, but it does not seem to be working for me??

There are two settings, there is a "deny" and an "allow"... Should I perhaps set everyone to deny?