Locale user on Windows 2000 Server

  • Thread starter Thread starter Hans Stoessel
  • Start date Start date
H

Hans Stoessel

Hi

I like to create a local user on a Windows 2000 Server (NTFS, not a domain
controller). This user should only have access to two directories, but its
not allowed for him to change the system, to install any hardware and so on.

Is that possible?
If yes, how can I define such a user?

Thanks for any help

Hans
 
Simply create a new user by using the Local Users and
Groups console on Computer Management. Such a newly
created user is by default only a member of the local
Users group so he won´t be able to change any systemwide
setting and he may only be granted permissions on the
local machine. Of course, those permissiones would have to
be explicitely defined by an administrator on the
necessary folders by using the security tab of the
folder´s properties. Check also that the user has Logon
locally righs.
Hope this helps,
Robert
 
Simply use the Local Users and Groups console on Computer
Management to create a new user account. Such a newly
created user account may only be granted rights and
permissions on the local machine, will only be a member of
the local Users group and so he will not be able to change
any systemwide setting and will only have permissions on
those folders to which you grant him permissions
explicitely using the Security tab of the folder
properties. Also make sure to grant him logon locally
rights.

Hope this helps,
Robert

Roberto Ruiz
Brainbench MVP for WinNT Workstation
http://www.brainbench.com
 
Hi

Thanks for your help.

Is it possible to disable the access of this user to the other machines in
the network? I mean, the user should only have access to the local machine
and can't login to another machine from the local network.

Thanks
Hans




Simply create a new user by using the Local Users and
Groups console on Computer Management. Such a newly
created user is by default only a member of the local
Users group so he won´t be able to change any systemwide
setting and he may only be granted permissions on the
local machine. Of course, those permissiones would have to
be explicitely defined by an administrator on the
necessary folders by using the security tab of the
folder´s properties. Check also that the user has Logon
locally righs.
Hope this helps,
Robert
 
Hi

Thanks for your help.

Is it possible to disable the access of this user to the other machines in
the network? I mean, the user should only have access to the local machine
and can't login to another machine from the local network.

Thanks
Hans
 
As long as this users logs on locally and not to the domain (in which case
you would have to create a domain account for him) he should not have access
to domain resources if he does try to he would get an authintication prompt.

Buz Brodin
MCSE NT4 / Win2K
Microsoft Enterprise Domain Support

Get Secure! - www.microsoft.com/security

This posting is provided "as is" with no warranties and confers no rights.

Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.
 
Back
Top