[djolex]

Hi everybody, I dont known english very vell,because i am from Serbia, but I will try to explain you the problem.
this is just hipothetically question please help me,i am just curious.here is question:

"I am responsible for the management of security on all servers in the company.
I have created a group named Server Support which includes all user accounts Server Support Team. I have to ensure that members of the Server Support Team can only log locally to File, Print & Application Server. What should I do?

Please help me,thanks. djole1000@yahoo.com
djolex@ymail.com


Djordje Petrovic

[Matt]

You can restrict the ability to "log on locally" and "log on through terminal services" through group policy. You can either do this through the Local Security Policy on each server (Local Security Policy > Local Policies > User Rights Assignment & configure the "Allow log on locally" and "Allow log on through terminal terminal services" policies), or you can create a group policy an OU if you have all of those servers in their own OU. (If you know something about group policies, you could also create the policy somewhere else, put all of those servers in a security group, and then security filter your policy by that group.)