One of my colleagues asked me recently if it is possible to prevent a certain group of people to use certain PC’s on our company network. If you have a domain set-up, it is quite easy, provided your set-up is done well.
My meaning of “if your set-up is done well” does not refer to how well your server software has been installed or anything of the sort. I refer to how well you have grouped your users in the active directory. We created groups for each level of user in our organisation, so it was quite easy for me to block a particular group of people from using certain workstations.
In this case, I was asked to prevent the Electrical and Instrument guys from using the PC’s allocated to the Mechanical Foremen, as the Electrical & Instrument guys has their own PC’s to work from.