Under an Active Directory user's properties (Account tab|Log On To settings), you can restrict what computers a user can log into. This works great, but it's not currently set for all lab users (and its a fair amount of work to set this manually). So (here's the question): How can this be set via GPO?
GPO has no provisions for this. You might, however, be able to write a VB script that buzzes through all user accounts in Active Directory and performs the work.
Additional Expert Help: Be sure to check our Answer FAQ for more expert advice. For faster answers, visit ITKnowledge...
By submitting your personal information, you agree that TechTarget and its partners may contact you regarding relevant content, products and special offers.