Discussion Locked

Creating a special user account

0 helpful
9 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hi,

I am looking into creating a domain account that have very limited access.

The user only can run Microsoft Office installed on the workstation.
The user can login from any workstation.
The user cannot save into the workstation. He/she can only save to their home folder which is located in a shared folder in the server.
There must also be a printer setup for them to print.

Here one clue :

Roaming profiles

Any suggestions are most welcomed.

9 replies

by cg it

Are you looking to see who knows there stuff? This sounds like a MCSE/MCSA test question.

by abubin

i am looking for the real answer and too lazy to search on the internet...plus, I am no MCSE holder

by therock_3333

hi
are you looking at creating a special account? i would say (assuming this is in active directory) create a new ou call it whatever you want, then create and link a group policy object to that ou, then place whatever user accounts in there. You can assign ms office in the group policy, you can deny them the ability to install any new programs, you can redirect the my documents folder, or set up a home folder on a network share then deny them the ability to save to the local hard drive, you can set their printers up in group policy too. if its not active directory you will need to set up some sort of system policy for the special user. hope that helps.

by abubin

great idea! I did just that before reading your suggestions. Nevertheless, accurate answer!

by r. a. caluste

1) The user can run microsoft office only: Create a group policy that prohibits the installation of new programs, access to windows and internet explorer, access to my computer, control panel. create a shortcut to ms office apps in the users's desktop profile.

2) The user can login from any workstation: Mandatory Roaming profiles. Rename the NTUSER.DAT in the shared folder to NTUSER.MAN

3) The user cannot save into the local workstation: Apply a disk quota to that user. set quota to 0.4) There must also be a printer setup for them to print: set up printer before you copy their individual local profiles into their roaming folder.

hope this helps

by abubin

good answer on (2) as I figured this out b4 reading you post. But (3) is not acceptable as making roaming profiles means that the users are able to login from ANY workstation and I would go over to 20-30 workstations just to set quota manually. Perhaps I can do this in GPO.

by abubin

For those interested, since I have closed the question, here is a food for thought....

There is an option in GPO that let you forbid access to A,B,C and/or D. You can specify a certain combination from the drop down list on these drives. But the problem is you can't just disallow access on HDDs. Because I want to allow access to floppy drives only which is not possible from those options, any ideas? Email me at abubin@linuxmail.org

This discussion is closed to new replies.