Can you please be more specific?  You are seeking to allow only one specific user to log on INTERACTIVELY on your kiosk machine??

 

I think one way would be to give only that user account (and local Admin, of course) the “Allow Logon Locally” user right.  This would restrict Interactive logon to only the users specified in this group policy (or local policy):

 

Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment\ Allow log on locally

 

On XP or 2003, you can log on through Remote Desktop if you have the following User Right (same path as above):

\Allow Logon through Terminal Services

 

I believe that “Remote Desktop Users” has the above right by default.

 

You could take more drastic steps as well if you’re afraid that the above techniques won’t do the trick (e.g. permissions on C drive, ‘Documents and Settings’, HKU, etc…).

 

I hope that helped!

 

Have a great day!

 

Robert Williams, MCSE NT4/2K/2K3, Security+

Infrastructure Rapid Response Engineer

Northeast Region

Microsoft Corporation

Global Solutions Support Center

 


From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sharif Naser
Sent: Sunday, June 12, 2005 3:46 AM
To: [email protected]
Subject: [ActiveDir] how to allow a specific user to access the domain from one pc & disallow the others

 

Hello experts,

 

I’m setting a kiosk machine, my question is how do I allow a specific user to login  to my domain from only one machine & disallow other users from logging from the same machine.

 

Regards,

DISCLAIMER:
This electronic message transmission contains information from Qatar Steel Company (QASCO)
which may be confidential or privileged. The information is intended to be for the use of
the individual or entity named above. Be aware that any disclosure,copying, distribution
or use of the contents of this information,including attachments, is prohibited without
the written consent of Qatar Steel Company (QASCO).

Reply via email to