Restrict Logon Locally

[adrianvasile]

I was wondering if anyone had any success on doing this.
I have a XP computer that has a specific role and I want to restrict who can logon into that machine. Right now we are running under 2003 domain and most of the users can logon and do stuff. I wan to be able to stop that using AD and a GPO. I created a GPO and linked that to the Organization Unit, filtered by a group but the users still can do that. Am I missing something?

 

[unclerico]

What GPO settings did you enable?? You should be setting up a computer policy using the logon locally setting found under Security Settings -> Local Policies -> User Rights Assignment.

I hate all Uppercase... I don't want my groups to seem angry at me all the time! =)
- ColdFlame (vbscript forum)

 

[adrianvasile]

That is the one that I enabled. I added the Administrators and only the user that I want to be able to logon. Additionally, I enabled the "Deny Logon Locally" but did not add anyone to the rule.