I have (simplified) two AD Groups for Users:
I have (simplified) two AD Groups for Computers (like in two rooms)
I want students to only be able to login computers in Room1.
I set up a Group Policy, ("denyStudents") to bgs.ac.at\Room2 and set
Computer Configuration > Policies > Security Settings > Local Policies > User Rights Assignment. > Deny log on locally
At this point I am stuck...
How do I include bgs.ac.at\Students at this point??