List Archives

This forum is an archive of all posts to our mailing list over the past few years. The forum is set read only therefore to contribute you will need to join our list community. See more info about this here.

When subscribed to the list you should use your standard email client to send your posts to ActiveDir@mail.activedir.org.

List Archives

Unanswered Active Topics

Forums Search

Forums >ActiveDir Mail List Archive >List Archives

Subject: Thanks RE: [ActiveDir] restrict user to log only to his workstation

Prev Next

You are not authorized to post a reply.

Author

Messages

sbdcunha

Posts:52

03/30/2010 3:45 PM
Thanks guys for the reply really apprecite but was jus wondering if similar thing could be achieved via a GPO cause in such case i could apply the gpo to a OU where all the users are there instead of individually changing for each user thnaks and reagrds simon > Hi Simon > Open the properties of the user account in AD, go to the Account tab and > click the "Log on to" button. You can restrict what machines a user can > log on to from there. > Jon > > -----Original Message----- > From: activedir-owner@mail.activedir.org > [mailto:activedir-owner@mail.activedir.org] On Behalf Of Benedict simon > Sent: 30 March 2010 13:15 > To: activedir@mail.activedir.org > Subject: [ActiveDir] restrict user to log only to his workstation > > > Dear All, > > I need my domain user to only log on from his workstation only and not > to logon with the same domain user ID and password from other client pcs > > I will explain this > > i have newly implemented a win2003 ADS with wsus and I am joining > clients computers to this AD server > > Right now i have 3 new OUs created apart from the default OUs > > pcusers > it-pcusers > servers > > now the pcusers,OU has all client computers and the it-pcusers, OU has > the domain users > > the servers,OU has the it dept server computers that i have joined to > the domain the it-pcusers,OU and the servers,OU has different Windows > UPdate policies and everything is working fine > > now since the servers have the AD server any domain User could walk up > to any of the live servers and logon the AD server with his domain user > account and password and get access to the data. > > since theservers have live data and applications running no domain user > should be allowed to log on to the servers. only the local administrator > and the domain administrator should be able to log in from any of the > servers > > so basically i would want the domain users i have created to be > restricted to be able to log onto the domain from his workstation only > or better from any computer which is in the same OU only In my case any > computers from the pcusers OU only > > apprecite your kind help and advice with steps. > > i am new to AD policies > > > Regards > > simon > > > > > > > > > -- > Network ADMIN > ------------- > KUWAIT MUNICIPALITY: > > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > > > ________________________________________________________________________ > St Catherine's School > Registered Office: Station Road, Bramley, Guildford, Surrey GU5 0DF. > Registered in England No. 3596520. Registered Charity No. 1070858 > A company limited by Guarantee. > > This e-mail has been scanned for all viruses by Star. The service is > powered by MessageLabs. > ________________________________________________________________________ > > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > -- Network ADMIN ------------- KUWAIT MUNICIPALITY: -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

You are not authorized to post a reply.

Forums >ActiveDir Mail List Archive >List Archives > Thanks RE: [ActiveDir] restrict user to log only to his workstation

ActiveForums 3.7

Syndicate

Friends

List Archives

List Archives

Friends

Members

Articles

Related Links

Ads