Forum Home
Press F1
Thread ID: 34783	2003-06-24 01:56:00	Stopping Network users logging in	nicnz (2273)	Press F1

Post ID	Timestamp	Content	User
154589	2003-06-24 01:56:00	Hi, we've setup a 2000 server for a university course. the machine is sitting in a room available to many people, but we would like to make sure that only a local user can log into the machine, not just anyone that has a network login to the domain the computer is attached. Thanks Tic	nicnz (2273)
154590	2003-06-24 03:35:00	This box is a domain controller? If you wish to deny network logons the most secure way would be to demote active directory. Open [Run], type "dcpromo", without the quotes and click [OK] Best practice would be to never have active directory running on a server which you do not want accepting domain logons. Other methods would be to remove all users because only an Administrator should ever really have local logon rights to a server. If you still want Active Directory on this server you could do this: 1) Click [Start], go to Programs > Administrative Tools and click on "Domain Controller Security Policy". 2) Expand "Local Policies" and click on "User Rights Assignment". 3) Double Click on "Access this computer from the network" 4) Remove any Users or groups that you do not want to have network access. Have all else fails, you could always just "pull the plug".	b1naryb0y (3)
1