Restricting logon access based on OU

[TheGrandHooHa]

First, some background on our setup: We use Active Directory to manage logon names for all faculty and staff at a local school district. Our current OU setup is something like this:

HIGHSCHOOL
-STUDENTS
-FACULTY
-COMPUTERS

MIDDLESCHOOL
-(same as above)

ELEMENTARYSCHOOL
-(again, same as above).

There is a generic login that is used at the elementary school. However, some students at the high school are using it to login and are putting porn and such in the elementary login's home directory. I was wondering if it was possible to allow this login to only be used on computers in the ELEMENTARYSCHOOL/COMPUTERS OU. Is this possible?

Thanks,
Chris

 

[Niksen]

In AD you have user account and machine accounts.
make a security group with the relevant machines and deny/ allow them what you need.

MVH Nicolai