Thanks alot Mike, you have been very helpful
Sorry for not making myself clear. Can this be achieved in win2k domain
environment.
I have already searched the web but i could not find a useful information
Any help in this regard is really highly appreciated.
Regards,
-----Original Message-----
From: [EMAIL PROTECTED] on behalf of mike kline
Sent: Sun 6/12/2005 4:03 PM
To: ActiveDir@mail.activedir.org
Cc:
Subject: Re: [ActiveDir] how to allow a specific user to access the
domain from one pc & disallow the others
This should help you
http://support.microsoft.com/kb/315231
How to turn on automatic logon in Windows XP
You are definitely taking a risk with this box on your domain in the
open like this.
Since this box will be in the open with no logon requirements you will
want to really tighten security on this box.
On top of the OS lockdowns at a minimum I would recommend putting a
password on the BIOS and prevent users from booting to a CD or USB
(easy enough to boot into Knoppix or use other methods to control of
the box)
Thanks
Mike
On 6/12/05, Sharif Naser <[EMAIL PROTECTED]> wrote:
>
> Thanks Mike & Robert.
>
> Now, I have a bonus question which is how do I allow automatic login
so
> that I don't tag the password on the kiosk console.
>
> Regards
>
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Robert Williams
> (RRE)
> Sent: Sunday, June 12, 2005 12:36 PM
> To: ActiveDir@mail.activedir.org
> Subject: RE: [ActiveDir] how to allow a specific user to access the
> domain from one pc & disallow the others
>
> I meant to have this in my last post...
>
> You could put the User Right "Deny Logon Locally" on all machines
OTHER
> than your kiosk machine to accomplish the other part of your scenario
> (logging onto ONLY one machine). The method mentioned below by Mike
> would suffice also for that purpose.
>
> Sorry for the extra junk in your mailbox ;-) Have a good day!
>
> Robert Williams, MCSE NT4/2K/2K3, Security+
> Infrastructure Rapid Response Engineer
> Northeast Region
> Microsoft Corporation
> Global Solutions Support Center
>
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of mike kline
> Sent: Sunday, June 12, 2005 5:21 AM
> To: ActiveDir@mail.activedir.org
> Subject: Re: [ActiveDir] how to allow a specific user to access the
> domain from one pc & disallow the others
>
> To allow the user to only logon on to that machine go into their
> Account Tab and use the "Log On To" feature and only allow access to
> that particular machine.
>
> You could deny everyone else the right to log on locally using a
policy.
>
> This is the setting in the GPO
>
> Computer Configuration\Windows Settings\Security Settings\Local
> Policies\User Rights Assignment
>
> Go into "Log on Locally" remove "Users, Power Users, and Backup
> Operators" then add this particular user. I would not remove the
> administrators but you can do that and just add your account in case
> you ever need to access the machine interactively.
>
> Thanks
> Mike
>
>
> On 6/12/05, Sharif Naser <[EMAIL PROTECTED]> wrote:
> >
> >
> > Hello experts,
> >
> >
> >
> > I'm setting a kiosk machine, my question is how do I allow a
specific
> user
> > to login to my domain from only one machine & disallow other users
> from
> > logging from the same machine.
> >
> >
> >
> > Regards,
> > DISCLAIMER:
> > This electronic message transmission contains information from Qatar
> Steel
> > Company (QASCO)
> > which may be confidential or privileged. The information is intended
> to be
> > for the use of
> > the individual or entity named above. Be aware that any
> disclosure,copying,
> > distribution
> > or use of the contents of this information,including attachments, is
> > prohibited without
> > the written consent of Qatar Steel Company (QASCO).
> >
> >
> List info : http://www.activedir.org/List.aspx
> List FAQ : http://www.activedir.org/ListFAQ.aspx
> List archive:
> http://www.mail-archive.com/activedir%40mail.activedir.org/
> List info : http://www.activedir.org/List.aspx
> List FAQ : http://www.activedir.org/ListFAQ.aspx
> List archive:
> http://www.mail-archive.com/activedir%40mail.activedir.org/
>
> DISCLAIMER:
> This electronic message transmission contains information from Qatar
Steel Company (QASCO)
> which may be confidential or privileged. The information is intended
to be for the use of
> the individual or entity named above. Be aware that any
disclosure,copying, distribution
> or use of the contents of this information,including attachments, is
prohibited without
> the written consent of Qatar Steel Company (QASCO).
>
> List info : http://www.activedir.org/List.aspx
> List FAQ : http://www.activedir.org/ListFAQ.aspx
> List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
>
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
DISCLAIMER:
This electronic message transmission contains information from Qatar Steel
Company (QASCO)
which may be confidential or privileged. The information is intended to be for
the use of
the individual or entity named above. Be aware that any disclosure,copying,
distribution
or use of the contents of this information,including attachments, is prohibited
without
the written consent of Qatar Steel Company (QASCO).
[EMAIL PROTECTED] ��V�r�y����4���i�����
