Set Logan Computer

In addition to logon hours, you can restrict the user to use a specific computer on the domain. When you set a logon computer for a user account, the user can login to the domain using that computer only. The user is denied access to the domain when the user attempts to logon to the domain using other computers.

Consider a scenario, where the employee, Steve Martins is violating the privacy of other employees. He uses other employees’ computer to logon to the domain. The user can view confidential data on other computers. You must ensure that Steve Martins does not access the domain using other computers.

To set the computer to logon for Steve Martins user account:

1. Open the Steve Martins Properties dialog box. The Steve Martins Properties dialog box appears.

2. Click the Account tab. The Account tab appears.

3. Click Log On To. The Logon Workstations dialog box appears.

The different options on the Logon Workstations dialog box are:

> All computers - Specifies that the user can logon to the domain using any computer

> The following computers - Specifies that the user can logon to the domain only using the specified computers

> Computer name - Specifies the computer name to deny logon

> Add - Includes the computer in the Computer name list

> Edit - Modifies the computer name in the list

> Remove - Deletes the computer from the Computer name list

4. Select the The following computers option.

5. Enter the name of the computer in the Computer name text box.

6. Click Add. Windows Server 2003 adds the computer to the list.

7. Click OK to close the Logon Workstations dialog box.

8. Click Apply in the Account tab of Steve Martins Properties dialog box.