RE: [ActiveDir] Limiting User Logon to Specific Machines

2005-11-04 Thread Steve Rochford
in OpSysSet opSys.win32shutdown EWX_LOGOFF NextEnd Sub From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David AragonSent: 04 November 2005 01:39To: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Limiting User Logon to Specific Machines Joe,

RE: [ActiveDir] Limiting User Logon to Specific Machines

2005-11-04 Thread Edwin
cents, Edwin From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Aragon Sent: Thursday, November 03, 2005 8:39 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Limiting User Logon to Specific Machines Joe, I agree, it would be impossible to block all

RE: [ActiveDir] Limiting User Logon to Specific Machines

2005-11-04 Thread Steve Rochford
y're doing but are just blundering around!) Steve From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of EdwinSent: 04 November 2005 11:56To: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Limiting User Logon to Specific Machines Hello Everyone: Why not

RE: [ActiveDir] Limiting User Logon to Specific Machines

2005-11-04 Thread joe
http://www.joeware.net/win/free/tools/qlogoff.htm From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David AragonSent: Thursday, November 03, 2005 8:39 PMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Limiting User Logon to Specific Machines Joe, I agree

RE: [ActiveDir] Limiting User Logon to Specific Machines

2005-11-04 Thread David Aragon
] [mailto:[EMAIL PROTECTED] On Behalf Of Steve RochfordSent: Friday, November 04, 2005 6:04 AMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Limiting User Logon to Specific Machines I'd guess that one problem is that the OP is trying to train people on how to use

RE: [ActiveDir] Limiting User Logon to Specific Machines

2005-11-04 Thread David Aragon
Thanks Joe, very nice and fast. David Aragon From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joeSent: Friday, November 04, 2005 9:29 AMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Limiting User Logon to Specific Machines http

Re: [ActiveDir] Limiting User Logon to Specific Machines

2005-11-03 Thread ASB
One option is to deny Logon access to this account via User Rights on machines outside the lab. Configure with GPO. -ASB FAST, CHEAP, SECURE: Pick Any TWO http://www.ultratech-llc.com/KB/ On 11/3/05, David Aragon [EMAIL PROTECTED] wrote: Background: We are a fair sized university. Before

Re: [ActiveDir] Limiting User Logon to Specific Machines

2005-11-03 Thread Za Vue
I agree that GPO is the route to take. There is too much work keying in what workstations an account can log into. I placed all lab machines and lab accounts into a single OU and apply GPO. ASB wrote: One option is to deny Logon access to this account via User Rights on machines outside

RE: [ActiveDir] Limiting User Logon to Specific Machines

2005-11-03 Thread David Aragon
another time. Thank you again for the suggestions, they are appreciated. David Aragon From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Za VueSent: Thursday, November 03, 2005 10:11 AMTo: ActiveDir@mail.activedir.orgSubject: Re: [ActiveDir] Limiting User Logon

RE: [ActiveDir] Limiting User Logon to Specific Machines

2005-11-03 Thread joe
@mail.activedir.orgSubject: RE: [ActiveDir] Limiting User Logon to Specific Machines Thank you for the suggestions. We had originally considered a GPO (andultimately may have to go back that direction) but had dismissed the idea due (in large part) to the socio-political structure we have (who would have believed

RE: [ActiveDir] Limiting User Logon to Specific Machines

2005-11-03 Thread David Aragon
@mail.activedir.orgSubject: RE: [ActiveDir] Limiting User Logon to Specific Machines Use a logon script. Nothing you do can prevent all mechanisms that could be used to use the ID (i.e. runas or look-a-likes, net use /user, etc) and the fact that you are targeting one single ID saysto me