David Jones
December 14th 03, 02:05 PM
If this is only one user, you don't even need a GPO.
On the domain controller open the Active Directory Users
and Computers snap-in/Administrative tool.
Find the user in question, and select Properties.
Click the Account tab, and click the "Log on To" button,
and add only the computer you want to allow. (I'm
checking on a 2003 server, so it might be in a slightly
different spot. If so, check the snap-in's help file and
it'll tell you)
They'll still be able to log into any machine with local
user accounts if they know any, but they will only be
able to log into the machine(s) you specify with their
domain account.
>-----Original Message-----
>Ok maybe a no brainer but.... I have a potentially
>dangerous user in a Win 2000 Domain with XP Pro
stations.
>I want to limit the logon privleges for this user to
only
>1 PC. Is there a group policy or area to effectily do
>this to either a user or organizational unit
>
>
>.
>
On the domain controller open the Active Directory Users
and Computers snap-in/Administrative tool.
Find the user in question, and select Properties.
Click the Account tab, and click the "Log on To" button,
and add only the computer you want to allow. (I'm
checking on a 2003 server, so it might be in a slightly
different spot. If so, check the snap-in's help file and
it'll tell you)
They'll still be able to log into any machine with local
user accounts if they know any, but they will only be
able to log into the machine(s) you specify with their
domain account.
>-----Original Message-----
>Ok maybe a no brainer but.... I have a potentially
>dangerous user in a Win 2000 Domain with XP Pro
stations.
>I want to limit the logon privleges for this user to
only
>1 PC. Is there a group policy or area to effectily do
>this to either a user or organizational unit
>
>
>.
>