Control Computer Access via Group Policy
hey all,
newbie gp here - familiar basic aspects of active directory
here's scenario: i'm running microsoft windows server 2003, ad 5.2. company work has ~250 computers, , logon access these machines controlled on individual basis via account>log on tab each user in active directory. however, have dozen loaner-laptops that changing hands.
is possible set group policy these machines allow logon registered in domain (or in particular user group) rather having add machines each user's account (which pain , waste of time)? know can administer kind of user/admin rights person has on computer through gp, can administer logon rights themselves? if so, where?
newbie gp here - familiar basic aspects of active directory
here's scenario: i'm running microsoft windows server 2003, ad 5.2. company work has ~250 computers, , logon access these machines controlled on individual basis via account>log on tab each user in active directory. however, have dozen loaner-laptops that changing hands.
is possible set group policy these machines allow logon registered in domain (or in particular user group) rather having add machines each user's account (which pain , waste of time)? know can administer kind of user/admin rights person has on computer through gp, can administer logon rights themselves? if so, where?
if set user account can logon single computer, gpo machines not change this.
this not work users own rights block them logging on machines. (as have restrcited user logon machine x)
your setup sounds admin heavy, there reason behind preventing staff moving machine?
this not work users own rights block them logging on machines. (as have restrcited user logon machine x)
your setup sounds admin heavy, there reason behind preventing staff moving machine?
Windows Server > Group Policy
Comments
Post a Comment