Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I need to deny users logins to some Windows servers (running Server 2008 R2) on my domain. Can this be done via GPO?

share|improve this question
possible duplicate of Disable permisisons for a user through group policy –  Skyhawk Sep 29 '11 at 15:46
IIRC users can't log into windows servers by default, unless you've either set the servers up as remote desktop servers or you've made them all a member of the domain admins group. If the former then stop installing roles you don't want and if the latter then you've got way bigger problems than just people using RDP. –  RobM Sep 29 '11 at 16:03
@RobertMoir I'm suddenly reminded of the time that a client asked me to block the domain administrator account from logging into the finance server, because everyone had the password for that account... –  Skyhawk Sep 29 '11 at 16:06
Thanks, for the answers some of them were useful, some not so useful, i think some people have a lot of spare time in there hands... Thanks to Robert Moir, you helped me, i've had forgotten that by default the users can't login (:| ) but then i went throw the security groups and found the problem, this domain isn't only editited by me...:( –  Flip Sep 29 '11 at 16:39
add comment

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.