[Samba] Avoid user logon

[James]

On 8/20/2015 12:58 PM, Marc Muehlfeld wrote:
> Am 20.08.2015 um 17:48 schrieb James:
>>> See
>>> https://4sysops.com/archives/deny-and-allow-workstation-logons-with-group-policy/
>> Another option is to set the 'Log On To' feature under user
>> 'Properties', 'Account' within Active Directory Users and Computers snap in.
> That's the first screenshot behind that link ;-)
>
> But this way only allows you to define where an account is allowed to
> logon - not the opposite (deny login).
>
>
> Regards,
> Marc
That's what I get for not clicking the link. =)

You are correct. You can't deny specific workstations and allow all
others. It's the opposite with this method.

I would like to offer a tip for anyone reading this thread. I have my
VPN users authenticating against Samba. You must add the Domain
Controller users are authenticating against as well as the specific
workstations you want them to log onto. It took me a moment or two to
figure out this problem.



-- 
-James