Mac domain with window server 2003 logon workstation restriction?

[Matt OS X]

Hello all,

I’m a newbie here. I tried to search answer for this issue but couldn’t find any answers. I hope you guys can help me out here.

Here’s a situation:

I am an apple technician for a university. All mac domains are registered under window server 2003 with Active Directory. One Department wants to have their 5 pcs computers and 1 mac have restrictions log in workstation with their department A.D. with one username that allows them to login these 6 computers in their department office only but not login to ANY other computers on campus.

The window server 2003 had successfully restricted one A.D username to 5 PCs but failed to recognize 1 mac even though I typed in its bind address. Any solutions?

Thanks in advance!

[Matt OS X]

Bump…

Anyone?

[Tom H]

If its just one mac take a look in the account login options on the client, you can restrict who can login network user wise from there 🙂

[Matt OS X]

I’m sorry, I’m lost. Could you be more specific? Thanks.

[Matt OS X]

anyone?

[Tom H]

Click options and specify the username, so that only that user can log into the mac ?

Tom

[Matt OS X]

This is not working. It needs the ability to have one username that CAN’T be logged in to ANY macs on domain EXCEPT for one particular mac. If using the local user restrictions on one mac, the username can STILL be logged in to OTHER domain macs. This is for security reasons to have the username to use ONE mac. Hope this clears up what I’m trying to say.

[Tom H]

Thats kinda what i meant… without adding a group to all the machines to say who is allowed i fail to see it working… ideally you need a OD server and specify the access rights in there.

[Matt OS X]

Any solution for my request above?

[Author]

Posts