[Samba] How to allow only particular users to logon to a particular computer?

FC Mario Patty fcmario76 at gmail.com
Tue Mar 3 10:43:59 GMT 2009

Thank-you Wolfgang, I'll give it a shot.

* You' re right. I saw some where in the web, someone mistakenly lock his
local user (administrator). :(


On Tue, Mar 3, 2009 at 5:37 PM, Wolfgang Ratzka
<ratzka at hrz.uni-marburg.de>wrote:

> I have a pc (already joinned the samba domain 'DOMAIN') that I want to keep
>> off other domain users but user DOMAIN\mark and DOMAIN\thomas whilst
>> letting
>> both of them to logon freely to other computers.
> You might want to manipulate the SeInteractiveLogonRight and possibly
> SeNetworkLogonRight on the PC itself. Have a look at
> http://support.microsoft.com/kb/279664
> Two hints:
> - You might want to define a group and assign rights to the group
>  instead of single users.
> - Avoid locking out yourself and the admins.
> Kind regards,
> --
> Wolfgang Ratzka  Phone: +49 6421 2823531  FAX: +49 6421 2826994
> Uni Marburg,  HRZ, Hans-Meerwein-Str., D-35032 Marburg, Germany

More information about the samba mailing list