Ya I understand about the locked down part, but at the moment, that is not a
solution. It will be in the future....

But the end users still should not be able to login, and I don't understand
why. I have created a group policy that has restricted groups in it to all
all users to have local admin rights to there PC's (I know, a bad idea, but
needed at the moment).

They are able to login to any server, these are not DC's...

Thanks


"Lanwench [MVP - Exchange]" wrote:

> Jordy <Jordy@discussions.microsoft.com> wrote:
> > Hello
> >
> > Is there a way to prevent users (not domain admins) from login into
> > servers. We have an enviroment were the servers are accessable to end
> > users
>
> You should have a locked cabinet or room, apart from everything else. If you
> don't have physical security you don't have any security at all.
>
> > and I need to prevent them from Login into the server directly,
>
> End users should not be able to log into your servers now, either at the
> console or via RD (unless this is a terminal server). Are they? If so,
> perhaps they're members of groups they shouldn't be - or someone has been
> monkeying around with policies.
>
> > but still have access to file and print when they login to
> > workstation.
> >
> > Thanks
>
>
>
>
>
>