Win2K Domain User question

[Sixpac_XP]

question is:

I am running a Windows 2000 domain and I have 6 Windows 2000 computers that I would only like certain people log onto those workstations and no one else (other then the administrators)

How do I go about doing this? Thanks.

[Steve R Jones]

Create user profile + password. (don't give out password)

[blubomber]

Can you be a little more specific? Do you need only cetain users to be able to log onto all 6 workstations or each user can log onto only one workstation and not the others?

[DVNT1]

I think Steve means create a local user account.

What I do with a Domain, edit the specific computer's Local Users and groups|Groups|User, then remove domain\Domain users from the User Group, the add the specific user(s) instead (like domain\John Doe).

[jman01pa]

Under the account options tab for the individual user there should be a button called "Log on to". The will allow you to set specific machines for specific users.

[DVNT1]

jman01pa's idea may be easier in your case.

[Sixpac_XP]

No I only want certain domain accounts to log on the computers... and no one else can log onto the machine.

[blubomber]

In that case, just setup all of your users on the domain using Active Directory Users and Computers. Do not add any local users to the workstations, and make sure the Guest accound on the domain and local computers is disabled. Also, make sure you have a good local admin password on the local machines too. Now, if all of the workstations are members of the domain, then only users you setup can log onto them.

Caution, this does not work with windows 9x and ME as workstation OSs.

I really like Active Directory, makes user/compute administration easy.

[Sixpac_XP]

Hmmmm.. no that's not the answer either.

Let me ask again.

I have a user called "sixpac" and that is a Windows 2000 DOMAIN ACCOUNT.

I have a computer on the Windows 2000 Domain and would like only the user "sixpac" to be allowed to logon to that machine. No other user on the network is allowed to logon the machine.

How do I go about doing it.

(never mind the local user accounts, this only pertains to domain users).

Does that clear up what I am asking???????

[jman01pa]

As I said above

From the domain server / active directory

Under the domain account options tab for the individual user there should be a button called "Log on to". The will allow you to set specific machines for specific users.