Home / server / Questions / 65170
Accepted
Mike
Asked: 2009-09-15 06:59:12 +0800 CST

How can I create whitelist of users allowed on a domain computer?

  • 772

I have a server with Windows Server 2008 which is joined to our local Active Directory Domain. This means that anyone can access it by default, but only certain specific users are Administrators. Instead, I would rather have it only allow a certain whitelist of users access to the computer. Does anyone know how to do this?

windows-server-2008

1 Answers

  1. Best Answer
    1. You would need to remove the 'domain users' from the local 'users' group. - that is where they are getting thier permissions to log into the machine.
    2. Then create a new group in AD that has the people you want to access the machine.
    3. Add that new group to the local 'users' group of the machine you want to limit.

    Then you just need to add a user to the new group to give them permissions to log into the box.

    • 2