Question : windows 2000 login (workgroup_

hi i have a workgroup. i have say 3 machines on the workgroup. i want a login account on the workgroup which is accessable by network share. but cannot be used to directly login to the machin.

i.e. i have 3 computers

alpha
bravo
charlie

and 1 user.

delta

alpha has a share called zulu. bravo is delta's machine. he can login into that. i want delta to be able to access the zulu share (i do this by adding his account on alpha, and adding permissions for him. BUT, i dont want him to be able to directly login to alpha.

Answer : windows 2000 login (workgroup_

If You Are Using Windows 2000 or Windows XP

Go to Control Panel, and then Administrative Tools, click on Local Security Policy

then find the Security Settings, then click on to Local Policies - then go to User Rights Assignemnts

there you'll find an option called Deny Logon Locally.

there are the list of users who cannot log on to the pc locally. so what you have to do is pretty simple,
add the name of the user or name of the Group ase MetsysNimda said

for further security you can also check the option, Log on Locally, and if you find the login name of grop in there just remove it.

and please do read the whole Local Security Policy carefully