How to create a group policy to restrict logon locally

How to create a group policy to restrict logon locally

In a case you want to restrict all users to logon using their domain ID and deny local user logon a domain computers, you may create Allow log on local policy. This example based on Windows 2003 SBS.

1. In Server management, navigate Advanced Management>Forest: your domain name>Small Business Server Client Computers.

2. Right click on Small Business Server Client Computers and select edit.

3. In the Group Policy Object Editor of Small Business Server Client Computers, navigate Computer Configuration>Windows Settings>Security Settings>Local Policies>User Rights Assignment.

4. Double click on Allow log on locally and check Define these policy settings.

5. Add administrators, domain admins and domain users.

6. Click OK to save the settings.

Note: you can setup Deny log on locally policy if you want to deny a specific user to log on locally.

Post your questions, comments, feedbacks and suggestions

Contact a consultant