How To Setup An Email Only User Account in Windows 2000

[Marvin Skittles]

My company recently hired an employee, and that employee will be based in
another country. So we want to give him an email account @ourdomain.com. So
I set him up a user account in Windows 2000 and gave him an email address.
However we do not want this employee to have access to any of the network
resources, intranet, etc. So how do I go about this in Active Directory, I
added him as a member of the backoffice internet users, but that didn't
work. This employee will not know our urls to gain access to our intranet
from the web, but we still need reassurance that if he did know it, he would
be unable to view it. Any help would be appreciated.

Thanks.

 

[Paul Bergson]

One of things you could do is create a separate ou and place this user in
that ou. Apply a gpo against that ou that locks down the user if he logs on
and place a script in the log on script in the gpo that logs him off if he
logs on. We do this for external customers that have authentication rights
to web sites but no access rights to our domain.

This works very well.

--


Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA

This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Marvin Skittles]

Thx, Paul.

I'll give it a shot, do you know any good sites with reference material on
group policy, somewhere I can brush up on it and logon scripts. Its been a
few years since I've used any of it.

 

[Paul Bergson]

This should provide what you need.

http://www.microsoft.com/technet/scriptcenter/scripts/default.mspx

http://www.comptechdoc.org/os/windows/win2k/win2kgpolicies.html

--


Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA

This posting is provided "AS IS" with no warranties, and confers no rights.