Re: AD account - limiting access to a single server

Howdie!

RadioLontrA schrieb:
I need some help on this:
I need to create an Active Directory account which must be able to
login via vpn and access only one server (with administrator
privileges on it).

Limiting the login to one server via the "logon to" in the account tab
is ok, but what i really need is to completely hide the rest of the
network to this user, cause we've got many shares around i dont want
him to see,

I think you end up messing around with the share permissions on all servers. You cannot turn off browsing the network - even if you could, since the user is Administrator on the machine, he/she could revent the settings made by Group Policy over and over again.

cheers,

Florian
--
Microsoft MVP - Windows Server - Group Policy.
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
.

Relevant Pages

  • Re: Is there malware on my Server?
    ... be exposing to the internet some means of authenticating to the server. ... Anonymous Access is checked and the login uses the ... Integrated Windows Authentication is checked. ... Administrador indicates hack attempts to log on with the Administrator ...
    (microsoft.public.windows.server.security)
  • Re: SBS Hangs for 4 plus hours
    ... offending file and rename - then restart the server - that service could not ... So when you can, please reboot the server and, when it ... > comes back up to a login prompt, ... > you look at what they're running under, it's Administrator (in other words, ...
    (microsoft.public.windows.server.sbs)
  • Re: OWA
    ... by editing the properties of these users from exchange server ADUC console, ... prompt for all accounts except administrator. ... And I have tried the domain\user login and it does not work. ...
    (microsoft.public.exchange.setup)
  • Re: SBS Hangs for 4 plus hours
    ... Currently when you log in as administrator, ... I'm trying to figure out if this is an admin login problem or a server ... So when you can, please reboot the server and, when it ...
    (microsoft.public.windows.server.sbs)
  • Re: Remote Access Confusion
    ... I was finally able to get into the Administrator login from the Server. ... I am trying to enable remote access for my ...
    (microsoft.public.windows.server.sbs)