0

I've configured a Restricted Groups policy in AD to allow some users to perform administration tasks on domain computers, following this guide.

This allows all the users in the group to be administrator on all domain computers.

I was wondering if it's possible to bind users to specific computers: userA admin of computerA, userB admin of computerB, userC admin of computerA and computerB.

Maxxer
  • 190

1 Answers1

0

In small domains you can restrict the user logon to domain computers in the properties of each user account in the Active Directory.

This is done in the Account tab by clicking on the "Log On To" button.

If the problem is more complicated than the above, please explain some more.

harrymc
  • 498,455