Guest Special Access Posted September 3, 2007 Posted September 3, 2007 I was recently asked if I could create a (second) user account for someone that already has an account in AD. Since security doesn't allow this, I said no. The manager said I could create an account that would allow him to logon to the web page (which authenticates thru AD) but not allow him to logon directly to any workstation. This is the first time I have heard of this... not saying it's not possible, but I sure don't know how to do it. Can anyone shed some light on this one for me? Thanks! Mike
Guest net_admin Posted September 3, 2007 Posted September 3, 2007 RE: create user but not allow them to logon anywhere? I believe you just need to insert the webserver name in the allowed workstations field in the user's properties. -- NetAdmin <São Paulo, BR> "Das ist nicht mein bier... arschloch."
Guest Pegasus \(MVP\) Posted September 3, 2007 Posted September 3, 2007 Re: create user but not allow them to logon anywhere? "Special Access" <nonyabidnezz@hotmail.com> wrote in message news:iqeod3t2da0jdt7v0gfios6capu5chop6f@4ax.com... >I was recently asked if I could create a (second) user account for > someone that already has an account in AD. Since security doesn't > allow this, I said no. The manager said I could create an account > that would allow him to logon to the web page (which authenticates > thru AD) but not allow him to logon directly to any workstation. > > This is the first time I have heard of this... not saying it's not > possible, but I sure don't know how to do it. Can anyone shed some > light on this one for me? > > Thanks! > Mike You could restrict the logon hours to "never".
Guest Special Access Posted September 4, 2007 Posted September 4, 2007 Re: create user but not allow them to logon anywhere? On Tue, 4 Sep 2007 00:03:58 +0200, "Pegasus \(MVP\)" <I.can@fly.com> wrote: > >"Special Access" <nonyabidnezz@hotmail.com> wrote in message >news:iqeod3t2da0jdt7v0gfios6capu5chop6f@4ax.com... >>I was recently asked if I could create a (second) user account for >> someone that already has an account in AD. Since security doesn't >> allow this, I said no. The manager said I could create an account >> that would allow him to logon to the web page (which authenticates >> thru AD) but not allow him to logon directly to any workstation. >> >> This is the first time I have heard of this... not saying it's not >> possible, but I sure don't know how to do it. Can anyone shed some >> light on this one for me? >> >> Thanks! >> Mike > >You could restrict the logon hours to "never". > so simple, yet so elegant. I'll have to test that in the morning. Thanks again, Pegasus.
Guest Special Access Posted September 4, 2007 Posted September 4, 2007 Re: create user but not allow them to logon anywhere? On Mon, 3 Sep 2007 10:24:07 -0700, net_admin <netadmin@discussions.microsoft.com> wrote: >I believe you just need to insert the webserver name in the allowed >workstations field in the user's properties. I'll have to see if that will work. Thanks net_admin for the input. Mike
Recommended Posts