create user but not allow them to logon anywhere?

[Guest Special Access]

I was recently asked if I could create a (second) user account for

someone that already has an account in AD. Since security doesn't

allow this, I said no. The manager said I could create an account

that would allow him to logon to the web page (which authenticates

thru AD) but not allow him to logon directly to any workstation.

 

This is the first time I have heard of this... not saying it's not

possible, but I sure don't know how to do it. Can anyone shed some

light on this one for me?

 

Thanks!

Mike

[Guest net_admin]

RE: create user but not allow them to logon anywhere?

 

I believe you just need to insert the webserver name in the allowed

workstations field in the user's properties.

 

--

NetAdmin <São Paulo, BR>

"Das ist nicht mein bier... arschloch."

[Guest Pegasus \(MVP\)]

Re: create user but not allow them to logon anywhere?

 

 

"Special Access" <nonyabidnezz@hotmail.com> wrote in message

news:iqeod3t2da0jdt7v0gfios6capu5chop6f@4ax.com...

>I was recently asked if I could create a (second) user account for

> someone that already has an account in AD. Since security doesn't

> allow this, I said no. The manager said I could create an account

> that would allow him to logon to the web page (which authenticates

> thru AD) but not allow him to logon directly to any workstation.

>

> This is the first time I have heard of this... not saying it's not

> possible, but I sure don't know how to do it. Can anyone shed some

> light on this one for me?

>

> Thanks!

> Mike

 

You could restrict the logon hours to "never".

[Guest Special Access]

Re: create user but not allow them to logon anywhere?

 

On Tue, 4 Sep 2007 00:03:58 +0200, "Pegasus \(MVP\)" <I.can@fly.com>

wrote:

>

>"Special Access" <nonyabidnezz@hotmail.com> wrote in message

>news:iqeod3t2da0jdt7v0gfios6capu5chop6f@4ax.com...

>>I was recently asked if I could create a (second) user account for

>> someone that already has an account in AD. Since security doesn't

>> allow this, I said no. The manager said I could create an account

>> that would allow him to logon to the web page (which authenticates

>> thru AD) but not allow him to logon directly to any workstation.

>>

>> This is the first time I have heard of this... not saying it's not

>> possible, but I sure don't know how to do it. Can anyone shed some

>> light on this one for me?

>>

>> Thanks!

>> Mike

>

>You could restrict the logon hours to "never".

>

 

so simple, yet so elegant. I'll have to test that in the morning.

 

Thanks again, Pegasus.

[Guest Special Access]

Re: create user but not allow them to logon anywhere?

 

On Mon, 3 Sep 2007 10:24:07 -0700, net_admin

<netadmin@discussions.microsoft.com> wrote:

>I believe you just need to insert the webserver name in the allowed

>workstations field in the user's properties.

 

I'll have to see if that will work. Thanks net_admin for the input.

 

Mike