What do you mean by restrict users?
You could just make a seperate OU for each subnet, and add
account restrictions that way.

I mean that I 12 different subnet's throughout my domain. I have a DC on
every subnet. I want certain users only to be able to log in on certain
subnets.

The different subnets are seperate physical locations - so I do not want
user to be able to log in to another computer at a different location, but be
able to log in to all computers in their subnet (Windows 2000/XP/98)

Thanks for any help.

"Bob" wrote:

"specialk" <specialk@discussions.microsoft.com> wrote in message
news:3ED54F3E-020B-4134-9E30-4CA0770FDC32@microsoft.com...
Hi,

You'll need to create a site object for each physical subnet via AD Sites
and Services. Place the appropriate DC for each physical subnet into it's
appropriate site.

--
Todd J Heron, MCSE
Windows 2003/2000/NT

Yes... but that won't restrict them.

That just prioritizes them...

Please elaborate if i'm mistken...

Thanks..


"Todd J Heron" wrote:

"specialk" <specialk@discussions.microsoft.com> wrote in message
news:553FCC52-D52D-4989-8559-EA3667C6FF4E@microsoft.com...
Ok, I see. With just a single domain, AFAIK, you are out of luck.

--
Todd J Heron, MCSE
Windows 2003/2000/NT