Share via

How to prevent the User to login only on his Computer and no other Computers

SSE@TUE 320 Reputation points
2026-03-03T06:43:01.9333333+00:00

Hi,

Is there a better way to prevent, that the user can login only to his Computer and no other Computers on the domain.

For example:

The User "Dummy" does allow to login only to Computer "Adamix" in the Domain and not on other Computer in the Domain.

I know I can do that on the following options

User's image

But how can I do that with GPO? I have many users and Computers

Regards

Windows for business | Windows Server | Directory services | User logon and profiles
0 comments No comments
{count} votes

Answer accepted by question author
  1. Harry Phan 15,915 Reputation points Independent Advisor
    2026-03-03T10:54:29.7566667+00:00

    You cannot enforce workstation-specific logon restrictions through Group Policy directly. The supported way in Active Directory is to configure the Logon Workstations property on the user account in Active Directory Users and Computers, which you already showed. That setting is stored in the userWorkstations attribute and is evaluated by the domain controller during authentication. GPO does not provide a native policy to restrict logon by workstation because it is account-specific, not machine-wide.

    If you have many users and computers, the scalable approach is to script or automate the modification of the userWorkstations attribute via PowerShell or LDAP, for example using Set-ADUser -Identity Dummy -LogonWorkstations Adamix. This way you can apply the restriction in bulk rather than manually editing each account. Another option is to use security groups and assign workstation-specific permissions, but the cleanest method remains managing the userWorkstations attribute programmatically. In short, GPO cannot do this; automation through AD tools is the best practice.

    0 comments No comments

0 additional answers

Sort by: Most helpful

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.