subject: Control the Workstations to Which Users Can Log on in Windows 7 [print this page] Control the Workstations to Which Users Can Log on in Windows 7
There is no doubt that domain administrators can access to local resources on workstations while others can't. But previous owners of a workstation still have access to its resources or that users who were granted temporary access to a workstation were never removed from the access list since workstations are moved around an organization. So you need to find a way to prevent your machine from destroying. Fortunately, you can control the workstations to which users can log on by using the account properties in Active Directory Users And Computers in a domain.
On the first step, just double-click the account to display the Properties dialog box. Then click the Log On To button on the Account tab.
In a homegroup or workgroup, by completing the steps below, you can remove a user's local account and deny logon :
1. Log on as a user with local administrator privileges. In Control Panel, under the User Accounts heading, click Add Or Remove User Accounts. This displays the Manage Accounts page.
2. Click the account which you want to remove.
3. Click Delete the Account.
4. Before deleting the account, you have the opportunity save the contents of the user's desktop and documents folders to a folder on the current user's desktop. In order to save the user's desktop and documents, click Keep Files.To delete the files, click Delete Files.
5. Clicking Delete Account to confirm the account deletion.
Note: Remember that in a domain (unless further restrictions are in place with regard to logging on to a workstation), a user might still be able to gain access to the workstation by logging on with a domain account.
