Disabling Logon Interactively Windows 2003 server

[Graham Mckenzie]

does anybody no how to disable this setting at all

many thanks


graham

[Laura E. Hunter \(MVP\)]

This is the same as the "Log on locally" setting.

In Group Policy (or the local security policy, if this is a standalone
server), navigate to Computer Configuration / Windows Settings / Security
Settings / Local Policies / User Rights Assignment. From here you can
specify which users and groups can and cannot log on locally to a particular
machine or group of machines.

As with any security-related settings, test this thoroughly before deploying
it in a production environment to avoid any unexpected results.

--
******************************
Laura E. Hunter - MCSE, MCT, MVP
Replies to newsgroup only


"Graham Mckenzie" <anonymous@discussions.microsoft.com> wrote in message
news:24b3301c45f9b$b2788930$a501280a@phx.gbl...

> does anybody no how to disable this setting at all
>
> many thanks
>
>
> graham

[Doug Sherman [MVP]]

If it's a domain controller, use the Group Policy for the Domain Controllers
OU; if it's a member server use the Local Security Policy. In Security
Settings/Local Policies you can grant the Logon locally right or Deny it to
individual users or groups. You can change the policy to Not Defined or
override it with a different policy. You can disable the entire Group
Policy object, but I don't think you can disable a user right.

Doug Sherman
MCSE Win2k/NT4.0, MCSA, MCP+I, MVP

"Graham Mckenzie" <anonymous@discussions.microsoft.com> wrote in message
news:24b3301c45f9b$b2788930$a501280a@phx.gbl...

> does anybody no how to disable this setting at all
>
> many thanks
>
>
> graham