📎 AI Summary:
The original poster is experiencing an issue with a user account on a Windows Server 2012 R2 domain, where a logon restriction to a single machine results in an error message when attempting to log in elsewhere—despite setting the restriction in the account properties. The respondent explains that for users to access multiple machines, the specific workstations must be added to the 'Logon Workstations' restriction, and remote desktop access may also require proper group membership or permissions. Overall, the discussion clarifies how to properly configure user logon restrictions and access permissions in a Windows domain environment.

blackicewr

New Member
Joined
Feb 25, 2019
Messages
1
Thread Author #1
Hi

I have domain with server2012R2

i have created user who has permited logon to another machine in domain. In account properties he has restriction to logon only for one machine. But when i try to log on i received such warninng :

"

the system administrator has limited the number of computers on which you can log in"

but when i defined in user account properties two machines to whom can log in, everything works fine.
 

Solution
Well yes if they log into one machine and you want them to have access to another you'd need to add it to the 'Logon Workstations' if you restrict that. For RDP you'd also need to add them to remote desktop services if they don't have the access inherited.

Neemobeer

Windows Forum Team
Staff member
Joined
Jul 4, 2015
Messages
8,995
Well yes if they log into one machine and you want them to have access to another you'd need to add it to the 'Logon Workstations' if you restrict that. For RDP you'd also need to add them to remote desktop services if they don't have the access inherited.
 

Solution