I am trying to setup a computer on our network that will allow a specific user and block others on our network from logging in. any ideas Gary

You want to prevent them from logging to what? If you want to prevent them from opening a session on a certain computer that is member of an AD domain then go the computer account properties and specify who is allowed to logon. If this is not what you need, I think you need to use a proxy server so in this case I recommand the use of ISA Server / TMG Forefront. This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. Microsoft Student Partner Microsoft Certified Professional Microsoft Certified Systems Administrator: Security Microsoft Certified Systems Engineer: Security Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration

Hello Gary, Following are the steps which you can perform on specific computer. Run -> Gpedit.msc -> press Enter Computer Configuration -> Windows Settings -> Local Policies -> User Rights Assignment in the right pane, look for "Log on locally" entry -> double click -> remove all default entries -> click on Add User or Group -> specify the desired account name ( e.g. Domain\Username ) -> click on Apply -> OK Its always better to to have local adminstrator account listed in "Log on locally" policy apart from other users/groups to avoid/troubleshoot logon issues in future.Thanks, Santosh (MCTS W2K8 AD and SCCM) To Infinity and Beyond

you can check local security policy (local policies/user right assignments), theres both deny policies (deny logon locally) as well as allow policies (allow log on locally). in the later you see which local groups have the rights to log on, upon joining a domain eg the domain users get added to the local users. playing around with those settings can lock you out of your pc though, so test your settings with an non production pc first

Thank you I will give this a tryGary Krajacic Fayetteville Free Library

Thank youGary Krajacic Fayetteville Free Library