Under an Active Directory user's properties (Account tab|Log On To settings), you can restrict what computers a user can log into. This works great, but it's not currently set for all lab users (and its a fair amount of work to set this manually). So (here's the question): How can this be set via GPO?
GPO has no provisions for this. You might, however, be able to write a VB script that buzzes through all user accounts in Active Directory and performs the work.
Additional Expert Help: Be sure to check our Answer FAQ for more expert advice. For faster answers, visit ITKnowledge...
By submitting your email address, you agree to receive emails regarding relevant topic offers from TechTarget and its partners. You can withdraw your consent at any time. Contact TechTarget at 275 Grove Street, Newton, MA.