GPO - Block user from logging in

[scotyboy56]

I'm hoping someone can help, to access network documents on the iPads we use Foldr, which requires the user to have a username and password. But as a Primary school the kids don't have passwords, and they want to keep it that way.

I was wondering if there was anyway I could create a user in AD lets say:

Username: ipad

Password: ipad

But is there anyway for me to block this person from logging onto a computer other than deactivating the account in AD, as that will stop them logging into foldr. I'm assuming if this is possible it will be done via Group Policy.

 

Thanks

[NB9457]

Couldn't you do it through log on times?

[DevilsAdvocate]

You could try changing the 'Logon to' setting for the user account in AD to just that of the Fileserver. That should then stop them being able to log onto anything else with those credentials.

[scotyboy56]

Couldn't you do it through log on times?

 

I have never seen that before?

[scotyboy56]

OMG!!! I've learnt something new!! You two are amazing!! THANKYOU!!

[NB9457]

 

It may work, may not, worth a go!

[Muz]

This should work, this was something an IT technician used on me when I was a 15 year old student who liked to 'test systems' many years ago.

 

I've never had to use it myself though.