subotai

Hi there!!

As a newcommer, I have a tricky question. Hope you'll be able to answer myrequest?

Okay here is the problem:
I have Windows 2003 server standards, with Active Directory, DHCP, and DNS on it.
Now imagine I bring my laptop and want to access the server. My laptop is not part of the server's domain.
I create a user in the server's Active Directory. And from my laptop, I just have to type the server's name and I'm in, I can see all the server's shared files.
But I don't want this to happen.
I want to deny login access to users that try to connect the server from another workstation which is not part of the server's domain.

How can I do that without writing a script???
Please help

Thank for your help!!!

NoReason

if you don't want them on the domain, why are you creating an AD account for them?

crazijoe

You can do this with Group Policy.

Why do you give a Domain User admin rights?

subotai

It's just a security question. Any user added on AD can by typing the name of the server simply access it. It's just to risky.

I didn't give the user admin rights. He just has read rights. I've done some changes with Group policies also, but didn't succeed.
What I want, is that the user I just create in AD who tries to connect to the server by typing the name of it receives a message saying that he has no rights accessing the server and must contact the admin.

I know it's not logic. Why create a user if you don't want him access the server, but it's just a matter of security. Microsoft should have done something to avoid that. But how !

Thanks for your responses

crazijoe

Not true.
On our network, the user can browse and see the server, when he tries to access it he is prompted for a username and password. Any shared folders on the server are set with NTFS permissions and shared accordingly.

jernelsingh

i think chk the group policy and access the pc with administrator y u r creating account