RE: Create User who can only query LDAP

From: Rob E (RobE_at_discussions.microsoft.com)
Date: 11/03/04 

Date: Wed, 3 Nov 2004 09:59:09 -0800

Well you could create a regular user and apply group policy to all of your
computers that specifically denies it (through group membership) the right to
login locally, through TS, and as a service.

"Dave Morrow" wrote:

> How would one create a user that can ONLY query the LDAP (AD) Server? No
> interactive login etc etc.
>
>
>

Relevant Pages

  • Re: Login Interactively
    ... much indicate some systemic failure of domain infrastructure. ... Microsoft MVP (Windows Security) ... >> I just enabled group policy so that all of the machines would get ... >> If I reboot sometimes it will let them login. ...
    (microsoft.public.windows.server.security)
  • Re: Login automatically
    ... Group Policy to lock down the login I want to use pretty tightly. ... When I set up windows 2k there is an option where Windows assumes a ... >> -Scott Elgram ...
    (microsoft.public.win2000.group_policy)
  • Request Help: I lost privileges after changing Network ID to a Workgroup from a domain, even though
    ... After changing the network ID from a domain to a workgroup, ... I receive 'Access Denied' message when I try to open the Group Policy ... but I had been logging into the defunct domain in the login screen until I ...
    (microsoft.public.windowsxp.security_admin)
  • Erratic slow login Win2k3 from XP SP2 - Profile GPO issue log usel
    ... On our network login times can vary for no obvious reason, ... There are long delays in processing the profile ... I have logged log in event using Group Policy core and registry ... I logged a client with a login delay, from entry of user name and password ...
    (microsoft.public.windows.group_policy)
  • Re: Logon interactively probmel after domain install
    ... rsop.msc to see if Group Policy at the domain level is enforcing any user ... But local users cannot ... login now, only admin can. ... "Local Security Settings\Users Rights Assignments"!! ...
    (microsoft.public.windowsxp.security_admin)