Server 2003 AD User account that can’t be used as a log in.

All right heres what’s needed:

A User account that can’t be used to log into a computer BUT can be used to join to the domain, access shard files and use servers with administrator access.