Restrict Users to Specific Workstations

Here is what we have: File server with Windows NT 4.0, less than 10
workstations with Windows 2000 Pro, multiple users with logons via a domain
name.

As it is now, any user with a network (domain) logon can access any
workstation, whether or not they are set up as a user on the local machine.
However, we want to prevent users from accessing certain local machines.

Is there a way to restrict the users to only be able to logon from specific
workstations? Or is there a way to lock out certain domain users and not
others on the local machines?

Thank you for any help.

On Feb 14, 3:08 pm, Sgt. Webster
wrote:
> Here is what we have: File server with Windows NT 4.0, less than 10
> workstations with Windows 2000 Pro, multiple users with logons via a domain
> name.
>
> As it is now, any user with a network (domain) logon can access any
> workstation, whether or not they are set up as a user on the local machine.
> However, we want to prevent users from accessing certain local machines.
>
> Is there a way to restrict the users to only be able to logon from specific
> workstations? Or is there a way to lock out certain domain users and not
> others on the local machines?
>
> Thank you for any help.


Yep, there sure is.

I am assuming you are running a Windows NT 4.0 domain. On a DC, fire
up User Manager for domains.

Next, double click the user you want to restrict. This will open the
properties page for that user.

Now, click on the button labeled "Logon To" at the bottom, in the
center of the row of butotns.

In the resulting window, click the radio button labeled "User May
Logon To These Workstations".

In the fields below, enter 1 or more workstations that you want to
limit the user to.

Click Ok, then Ok again.

You are done! The user will not be able to log on to unauthorized
workstations.

Hope this helps,
Derek

http://www.fortypoundhead.com