I need to deny users logins to some Windows servers (running Server 2008 R2) on my domain. Can this be done via GPO?

link|improve this question

57% accept rate
possible duplicate of Disable permisisons for a user through group policy – Miles Erickson Sep 29 '11 at 15:46
1  
IIRC users can't log into windows servers by default, unless you've either set the servers up as remote desktop servers or you've made them all a member of the domain admins group. If the former then stop installing roles you don't want and if the latter then you've got way bigger problems than just people using RDP. – DJ Pon3 Sep 29 '11 at 16:03
1  
@RobertMoir I'm suddenly reminded of the time that a client asked me to block the domain administrator account from logging into the finance server, because everyone had the password for that account... – Miles Erickson Sep 29 '11 at 16:06
Thanks, for the answers some of them were useful, some not so useful, i think some people have a lot of spare time in there hands... Thanks to Robert Moir, you helped me, i've had forgotten that by default the users can't login (:| ) but then i went throw the security groups and found the problem, this domain isn't only editited by me...:( – Flip Sep 29 '11 at 16:39
feedback

Know someone who can answer? Share a link to this question via email, Google+, Twitter, or Facebook.

Your Answer

 
or
required, but never shown

Browse other questions tagged or ask your own question.