Home / server / Questions / 146323
Accepted
Chad Moran
Asked: 2010-05-29 08:40:09 +0800 CST

Lock down computer when on a domain

  • 772

Is there a way to disable all users except your user from logging into your PC when you're part of a Windows Server 2008 Active Directory domain?

windows-server-2008 active-directory windows-7

2 Answers

  1. Best Answer

    If you're blocking it through the AD, you're going to need to go to the "Active Directory Users and Computers", select the record for the computer in the domain, and go to the "Security" tab and remove everyone you don't want to have access.

    Might also want to go to "Local Security Settings -> User Rights Assignment" and make sure "Access this computer from the Network" is right, and "Allow logon though terminal services" as well.

    • 3

  2. You can add your user account to the "Users" local group, then remove the "Domain Users" AD group from the local users group.

    This won't keep admins out though.

    • 0