Restrict user to a single PC

Hi,
We have a SBS 2008 server and need to configure a user to connect to an
specific computer and restrict access to others PCs. Is that possible?

Thanks in advance,
Danny

Hi

Not by any normal technology. I supose you could automate the logoff time
for any users and require a fingerprint to logon, but seems a lot of trouble
for the staff when a simple instruction (verbal as well as written) should
do.

There are many, many examples of employee behaviour that are best enforced
by policy not technology. Coming to work on time is just one example.


-
Larry
-Please post the resolution to your issue so others may benefit
-Get Your SBS Health Check at www.sbsbpa.co

Yes just only allow him to login remotely to that PC
(if the don't have a local Profile on that PC they won't be able to login
anyway.)
And force him through RWW to Select only that PC.
Russ
--
Russell Grover - SBITS.Biz [SBS-MVP]
MCP, MCPS, MCNPS, SBSC
Remote Small Business Server/Computer Support - www.SBITS.Biz
BPOS - Microsoft Online Services - www.BPOSMadeEasy.com
Easy Redirect to Microsoft's New SBS Public Support Forum -
www.SBSRepair.com

"Danny" <> wrote in message
news:09764CAF-7DB9-45C9-8703-...
> Hi,
> We have a SBS 2008 server and need to configure a user to connect to an
> specific computer and restrict access to others PCs. Is that possible?
>
> Thanks in advance,
> Danny

Play with the Log On to setting (userworkstations attribute) to see if it
provides what you're looking for.

In AD Users and Computers, view the properties of the user account, Account
tab, Log On To button.

--
Chris Puckett

This posting is provided "AS IS" with no warranties, and confers no rights.



"Danny" <> wrote in message
news:09764CAF-7DB9-45C9-8703-...
> Hi,
> We have a SBS 2008 server and need to configure a user to connect to an
> specific computer and restrict access to others PCs. Is that possible?
>
> Thanks in advance,
> Danny

In article <09764CAF-7DB9-45C9-8703->,
says...
>
> Hi,
> We have a SBS 2008 server and need to configure a user to connect to an
> specific computer and restrict access to others PCs. Is that possible?

Open Active Directory Users and Computers, double click on the Users
account, Click on the "Account" Tab, then select the LOGON TO button,
enter the name of the workstation and you may have to also enter the
server name (if you do RWW). You can also limit logon times.





--
You can't trust your best friends, your five senses, only the little
voice inside you that most civilians don't even hear -- Listen to that.
Trust yourself.
(remove 999 for proper email address)

Thanks Leythos. That's what I was looking for...

"Leythos" wrote:

> In article <09764CAF-7DB9-45C9-8703->,
> says...
> >
> > Hi,
> > We have a SBS 2008 server and need to configure a user to connect to an
> > specific computer and restrict access to others PCs. Is that possible?
>
> Open Active Directory Users and Computers, double click on the Users
> account, Click on the "Account" Tab, then select the LOGON TO button,
> enter the name of the workstation and you may have to also enter the
> server name (if you do RWW). You can also limit logon times.
>
>
>
>
>
> --
> You can't trust your best friends, your five senses, only the little
> voice inside you that most civilians don't even hear -- Listen to that.
> Trust yourself.
> (remove 999 for proper email address)
> .
>

Yep... I forgot about that, as I don't forsee ever using it. Sounds good
at first glance, but in most organizations we give a user a PC so they can
work. I would not want that user unable to work because the assigned computer
was broken and the admin was not immediately available to assign another
one. But I grant that there may be exceptions.

In general, I avoid imposing company policy through technology. Sometime,
when it is absolutly in the best interest of the company, such as blocking
x-xxx rated sites at the edge, it is necessary, but in general I would prefer
employees and associates do the right thing not becuase they can't do otherwise,
but because it is the right thing to do.

And, no, I don't advocate putting all the company money in a pile in the
middle of the floor where anyone can help themselves. We secure the things
that must be secured for the good of all, and don't use ankle bracelets (usually)
to verify who is in which office.

I am not pendantic about this. But it seems to me that errecting a wall
where none is truely needed will just breed resentment.

-
Larry

-Please post the resolution to your issue so others may benefit

-Get Your SBS Health Check at www.sbsbpa.com

In article < >,
says...
> Yep... I forgot about that, as I don't forsee ever using it. Sounds good
> at first glance, but in most organizations we give a user a PC so they can
> work. I would not want that user unable to work because the assigned computer
> was broken and the admin was not immediately available to assign another
> one. But I grant that there may be exceptions.
>

The best case I can see for restricting computer access is temp office
staff, reception, and part time workers.

Remember, in many cases, SBS 03 requires that the users be local admins
for the scripts to properly configure their email and printers, so that
means that a temp could also access the "Documents and Settings" of a
manager if you let them logon anywhere as a local admin - not something
many people think about.

At least in SBS 08 with redirected folders we don't have local files on
the C drive.

--
You can't trust your best friends, your five senses, only the little
voice inside you that most civilians don't even hear -- Listen to that.
Trust yourself.
(remove 999 for proper email address)

There also exists both local and group policy settings that can deny users
or groups from logging onto or accessing specific computers. So perhaps if
you just want to ensure the second shift guy can't go logon to the front
offtice workers computers (accountants, president, payroll, hr) then that
tool is available as well.


Leythos wrote:
> In article < >,
> says...
>> Yep... I forgot about that, as I don't forsee ever using it. Sounds
>> good
>> at first glance, but in most organizations we give a user a PC so
>> they can work. I would not want that user unable to work because
>> the assigned computer was broken and the admin was not immediately
>> available to assign another
>> one. But I grant that there may be exceptions.
>>
>
> The best case I can see for restricting computer access is temp office
> staff, reception, and part time workers.
>
> Remember, in many cases, SBS 03 requires that the users be local
> admins for the scripts to properly configure their email and
> printers, so that means that a temp could also access the "Documents
> and Settings" of a manager if you let them logon anywhere as a local
> admin - not something many people think about.
>
> At least in SBS 08 with redirected folders we don't have local files
> on the C drive.

--
/kj