AD account – limiting access to a single server

Hello,

I need some help on this:
I need to create an Active Directory account which must be able to login via vpn and access only one server (with administrator privileges on it).

Limiting the login to one server via the “logon to” in the account tab is ok, but what i really need is to completely hide the rest of the network to this user, we’ve got many shares around i dont want him to see,
can anybody help?

thanks a lot,
Gibit