RE: [ActiveDir] how to allow a specific user to access the domain from one pc disallow the others

Hi Mike, Sorry again for not reading your answer properly, anyway if automatic login needs to be enabled on windows 2000 domain , i need to add default domain, default user name , default password change AutoAdminLogon key from 0 to 1. Regards, -Original Message- From: [EMAIL

Re: [ActiveDir] how to allow a specific user to access the domain from one pc disallow the others

To allow the user to only logon on to that machine go into their Account Tab and use the Log On To feature and only allow access to that particular machine. You could deny everyone else the right to log on locally using a policy. This is the setting in the GPO Computer Configuration\Windows

RE: [ActiveDir] how to allow a specific user to access the domain from one pc disallow the others

Can you please be more specific? You are seeking to allow only one specific user to log on INTERACTIVELY on your kiosk machine?? I think one way would be to give only that user account (and local Admin, of course) the Allow Logon Locally user right. This would restrict Interactive logon

RE: [ActiveDir] how to allow a specific user to access the domain from one pc disallow the others

I meant to have this in my last post... You could put the User Right Deny Logon Locally on all machines OTHER than your kiosk machine to accomplish the other part of your scenario (logging onto ONLY one machine). The method mentioned below by Mike would suffice also for that purpose. Sorry for

RE: [ActiveDir] how to allow a specific user to access the domain from one pc disallow the others

Thanks Mike Robert. Now, I have a bonus question which is how do I allow automatic login so that I don't tag the password on the kiosk console. Regards -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Robert Williams (RRE) Sent: Sunday, June 12, 2005

Re: [ActiveDir] how to allow a specific user to access the domain from one pc disallow the others

This should help you http://support.microsoft.com/kb/315231 How to turn on automatic logon in Windows XP You are definitely taking a risk with this box on your domain in the open like this. Since this box will be in the open with no logon requirements you will want to really tighten security

RE: [ActiveDir] how to allow a specific user to access the domain from one pc disallow the others

Thanks alot Mike, you have been very helpful Sorry for not making myself clear. Can this be achieved in win2k domain environment. I have already searched the web but i could not find a useful information Any help in this regard is really highly appreciated. Regards, -Original

Re: [ActiveDir] how to allow a specific user to access the domain from one pc disallow the others

To answer your follow up yes you can also enable auto login on a W2K box http://support.microsoft.com/kb/315231 How To Enable Automatic Logon in Windows 2000 Professional The polices and methods that Robert and I listed in the first few messages wilil work on a Windows 2000 or 2003 domain.