Re: access restrictions

A local account will do exactly what you want. However if it is not an
option, you have less good options.
Setting the logon property on the account will not restrict access to
shares, just which servers the account can log on to.
You will also need to make sure the account is not in any groups that have
access to shares. If you have used Everyone, that won't restrict them. If
you have used specific groups it will,
Hope that helps,
Anthony, http://www.airdesk.com



"exchange_confused" <exchangeconfused@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
message news:DB26503C-62C7-46B4-8BE9-3F460F76122D@xxxxxxxxxxxxxxxx
I will test this out tomorrow
I believe this action
in the
Account Properties)
will only allow the account access to the server
But i also hope that this action will restrict access to shares across the
network. Local account is not an option.
I dont want the account to access anything else on the network - network
shares and etc. I dont want to go around to each share and put a deny on
this
user account.


"Anthony" wrote:

You can give him a local account on the server.
Or give him a domain account; restrict the servers it can log on to (in
the
Account Properties) and remove it from any groups.
Hope that helps,
Anthony, http://www.airdesk.com


"exchange_confused" <exchangeconfused@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
message news:95DE8DAD-E23F-4C3A-AC8A-8C3106AE1E72@xxxxxxxxxxxxxxxx
Hi,

I have a vendor who would like access to one server and possibly others
to
manage the application. I only want to give him access to the server
and I
dont want that user account or group to access any shares on the
network
is there a way to restrict access to a user account to a server and
restrict
the user account from accessing shares via run command, explorer and
etc.
??





.

Relevant Pages

  • Re: Accessing SBS 2003 Shares with XP Home
    ... I have setup a few xp home clients this way but I have put a new server ... I have tried user password and admin password. ... access shares very easily. ... of the Admin account that was assigned to that share. ...
    (microsoft.public.windows.server.sbs)
  • Re: Re-Post - "the trust relationship between this workstation and the
    ... "the trust relationship between this workstation and the primary domain ... only problem is adding a new user account on the station. ... Client computer must use STRICTLY the INTERNAL DNS server which can ... Attr: subschemaSubentry ...
    (microsoft.public.windows.server.active_directory)
  • Re: Same question, still no answer!!!
    ... Sounds then like we are all paying for a feature set only large companies ... The "proxy server" pc is actually an older box stuffed ... Expectation #1) keep the ethernet more or less as is. ... The kids account would be ...
    (microsoft.public.windowsxp.basics)
  • Re: Re-Post - "the trust relationship between this workstation and the
    ... "the trust relationship between this workstation and the primary domain ... only problem is adding a new user account on the station. ... This would be on the DNS server 172.20.100.2 ... Attr: subschemaSubentry ...
    (microsoft.public.windows.server.active_directory)
  • Sending email to mydomain.com
    ... server will appear as undeliverable. ... This happens because you are using the POP3 connector... ... an NDR when an account doesn't exist). ... >different from the user account names for the exchange ...
    (microsoft.public.windows.server.sbs)