Restrict Access to specific computer

[fhvac]

I am running SBS 2003, I have 5 client computers and about 20 user names. There are 3 computers that I do not want the majoirty of users to use. Is there a way I can block access to their user name so they wont be able to logon?

Thanks

 

[lisat76]

you could go to those specific pc's and deny access to the groups that you do not want to access those pc's one way is to go to te gpo of that pc and do it or the gpo on the server

 

[wahnula]

Make those people members of a custom permissions group, among the permissions will be denying them use of the PCs in question.

Tony

"...an eye for an eye leaves everybody blind" - M.L. King

 

[fhvac]

How does one make a permissions group? lol

 

[fhvac]

I did a little research, would it be appropriate to put select users in a group and then add that group to the Deny Log on Locally setting?

Thanks

 

[wahnula]

Yes, create a group containing those users. Good job on the research, keep it up. You can deny that group access at the workstations in question, probably the easiest way, but I've never needed to do exactly that task.

The best way to learn is roll up your sleeves and dig in. One caveat I learned early on (I am a user like yourself)...is not to try and circumvent the Wizards in SBS. Use them whenever possible, they are your friend.

Tony

"...an eye for an eye leaves everybody blind" - M.L. King