Restricting a user to logon to a client on Windows 2000 1

[rexc]

To anyone with a good heart, I need help!.
Here goes my question,
Is is possible to restrict a domain user to log on a particular client computer?
Thanks!
Rex

 

[sase]

Yes.. Most definitely..

Active Directory... create an organizational unit for the particular computer(s)

Move the particular computer into that unit.

Right click the unit> Properties...... Group Policy.

Create a group Policy
Computer Configuration>Windows Settings> Security Settings>Local Policys>User Rights Assignments... Deny Logon locally

Add the particular user and/or group

 

[rexc]

Thanks! You're the one with a good heart! I will try your idea.
Anyway, I have just figured out how to restrict a user the other way(my way).
But I will still do it and tell you which is better.
Best regards.

 

[Davetoo]

The simplest way is to go to the properties for the Domain User in AD, go to Account, click on Log on to and enter the computer name of the system you want that user to only be able to log on to.

Simple as that.

 

[GiaBetiu]

Just one observation. That feature require NetBIOS over TCP/IP activated in your network. Be sure that the computers involved have that activated (check the eventual DHCP server too for options that is sending).

Gia Betiu
gia@almondeyes.net
Computer Eng. CNE 4, CNE 5, MCSE Win2K
new:

http://www.almondeyes.net

(just started)

 

[rexc]

Thank you guys!
I really appreciate your ideas.