Ideas wanted on account restriction

We are looking for a method to prevent a certain user account from
logging in interactively, while still being able to use elevated
rights (on same account). Since entering elevated rights is an
interactive login, this doesn't work.

Any other ideas? I've thought of login script to log them out, but
this is easy to bypass, and I also would not like them to process user
GPOs. Looking for a clever plan! Thx

Brad

Hi Brad

Are you in a domain environment using group policy?

You could create a group policy just for this user which disables
interactive logon.

James

"Brad" wrote:

> We are looking for a method to prevent a certain user account from
> logging in interactively, while still being able to use elevated
> rights (on same account). Since entering elevated rights is an
> interactive login, this doesn't work.
>
> Any other ideas? I've thought of login script to log them out, but
> this is easy to bypass, and I also would not like them to process user
> GPOs. Looking for a clever plan! Thx
>
> Brad
>