second login prompt required

[Steve]

Situation: Active Directory is in place.

Requirement: Would like to add a dedicated app server to
the ActiveDirectory environment. However, once the user
logs into the Domain with the domain account and attempts
to access the application server. Must have a second
prompt to login into that specific sever to access the app.

What's the best solution for this situation.
Help would be much appreciated

Tx

 

[Simon Geary]

You could always keep the server as a workgroup member and not join it to
the domain, then when a domain client tries to log on they will need to
provide credentials from a local user account as well.

This is all bad practice though, you should be able to control access to a
server by using normal Active Directory permissions rather than giving users
two sets of credentials to remember..

 

[Cary Shultz [A.D. MVP]]

Steve,

On top of what Simon stated, I am not sure that I understand why you would
want to do this. If there is an issue with allowing only certain users very
specific access to it then you would normally control this via the Share and
NTFS permissions. And remember, create a Global Security group ( or Global
Security Groups ) and place the user account objects in the correct group
and then create a Local Security Group ( or Local Security Groups ), make
the appropriate Global Security group a member of that and apply the
permissions to the Local Security Group.

HTH,

Cary