Block out user

Windows Networking 2246 This topic was started by ancker, 2001-03-09 17:21

Discussion 8

132 Posts
Location -
Joined 2000-02-02

2001-03-09 18:21

Is it possible in Windows 2000 to block a user of a domain from using a certain machine.

I currently have a 2000 Pro machine on a domain. Currently any domain user (which is over 1000 users) can log onto my machine. Is there a way for me to not allow users other than myself to use this machine?

Thanks

Ancker Jade

eddie if you read this get on aol i.m.

overclocking the duron

Participate on our website and join the conversation

You have already an account on our website? Use the link below to login.

Create a new user account. Registration is free and takes only a few seconds.

This topic is archived. New comments cannot be posted and votes cannot be cast.

Responses to this topic

Xiven

690 Posts
Location -
Joined 2000-05-21

#43095

2001-03-09 18:50

Go to Programs -> Administrative Tools -> Local Security Policy (if you can't see administrative tools, go to Settings -> Taskbar & Start Menu and enable it).

GO to Local Policies -> User Rights Assignment and either add users to "Deny logon locally" or remove them from "Log on locally". Be careful not to remove your own account though (VERY VERY IMPORTANT!!)

--
Xiven

[This message has been edited by Xiven (edited 13 March 2001).]

ancker

132 Posts
Location -
Joined 2000-02-02

#43096

2001-03-09 23:24

OK thanks...it worked..

but i told me colleague that he should also restrict access...and he did just that..he locked himself(including local administrator) out of his machine..

what can be done??

Xiven

690 Posts
Location -
Joined 2000-05-21

#43097

2001-03-13 11:23

Oh dear, I did warn you AFAIK There's no easy way around it other than to use an emergency repair disk. Hope someone else has a better suggestion.

BladeRunner

1207 Posts
Location -
Joined 2000-03-27

#43098

2001-03-13 12:22

Although he has locked himself and local administrator out, has he locked 'Domain Admins' out?
By default the 'Domain Admins' group gets admin rights on workstations.

ancker

132 Posts
Location -
Joined 2000-02-02

#43099

2001-03-13 23:43

Actually there is a way around it..

it's actually pretty neat.
install Windows 2000 Server OR Pro Resource Kit.
(you must also have a win2k box(with admin rights networked to the machine messed up.)

from the command prompt where "ntrights" is type
c:\ntrights -m \\computer -u (user or group) -r SeDenyInteractiveLogonRight

worked like a charm.....

[This message has been edited by ancker (edited 15 March 2001).]