login restriction in Domain

hi,

how can i restrict certain no of domain users only to enable to login to
my workstation. this can be done via the setting in workstation itself but i
want to do the same task in DC Server (in Active directory users and
computers) so that i dont have to move around to each workstation.

thanks in adv
aken

You can do this on a per user basis in AD Users and Computers. Right click
on a user account and select Properties - click the Account tab - Log On To
button. You can specify the the computers that the user may log onto.

Doug Sherman
MCSE, MCSA, MCP+I, MVP

"aken" <(E-Mail Removed)> wrote in message
news:530DFB16-A1BC-440A-9192-(E-Mail Removed)...
> hi,
>
> how can i restrict certain no of domain users only to enable to login
to
> my workstation. this can be done via the setting in workstation itself but
i
> want to do the same task in DC Server (in Active directory users and
> computers) so that i dont have to move around to each workstation.
>
> thanks in adv
> aken

thanks for the Re. i will act upon it.

well, to make a user login to specific computers in AD users and computers
would be overwork as we have 200 plus nodes. is there a way to group these
computers like organizational unit for users? this will surely make the
process more handy.

as such we have windows 2003 server and Xp professional clients.

pls advice.

"Doug Sherman [MVP]" wrote:

> You can do this on a per user basis in AD Users and Computers. Right click
> on a user account and select Properties - click the Account tab - Log On To
> button. You can specify the the computers that the user may log onto.
>
> Doug Sherman
> MCSE, MCSA, MCP+I, MVP
>
> "aken" <(E-Mail Removed)> wrote in message
> news:530DFB16-A1BC-440A-9192-(E-Mail Removed)...
> > hi,
> >
> > how can i restrict certain no of domain users only to enable to login
> to
> > my workstation. this can be done via the setting in workstation itself but
> i
> > want to do the same task in DC Server (in Active directory users and
> > computers) so that i dont have to move around to each workstation.
> >
> > thanks in adv
> > aken
>
>
>

Well, you can organize computer accounts into OUs and then use Group
Policy - Computer Configuration/Windows Settings/Security Settings/Local
Policies/User Rights Assignment. You can add/remove users and groups from
the 'Allow log on locally' right.

Doug Sherman
MCSE, CMSA, MCP+I, MVP


"aken" <(E-Mail Removed)> wrote in message
news:96787014-1932-475E-92F4-(E-Mail Removed)...
>
> thanks for the Re. i will act upon it.
>
> well, to make a user login to specific computers in AD users and computers
> would be overwork as we have 200 plus nodes. is there a way to group these
> computers like organizational unit for users? this will surely make the
> process more handy.
>
> as such we have windows 2003 server and Xp professional clients.
>
> pls advice.
>
> "Doug Sherman [MVP]" wrote:
>
> > You can do this on a per user basis in AD Users and Computers. Right
click
> > on a user account and select Properties - click the Account tab - Log On
To
> > button. You can specify the the computers that the user may log onto.
> >
> > Doug Sherman
> > MCSE, MCSA, MCP+I, MVP
> >
> > "aken" <(E-Mail Removed)> wrote in message
> > news:530DFB16-A1BC-440A-9192-(E-Mail Removed)...
> > > hi,
> > >
> > > how can i restrict certain no of domain users only to enable to
login
> > to
> > > my workstation. this can be done via the setting in workstation itself
but
> > i
> > > want to do the same task in DC Server (in Active directory users and
> > > computers) so that i dont have to move around to each workstation.
> > >
> > > thanks in adv
> > > aken
> >
> >
> >