Prevent access to other servers

[Chuckster]

Hi all,

 

I would like a particular non-staff member have VPN access to a member server using the account I created for him. However, what I don't want is him being able to access the other servers. For example, typing in the run dialog box: \\servername\sharename

 

So far all I have managed to do is created a security group and dump his user account in it. I was hoping someone would be kind enough to tell me what the next step would be from there.

[kmount]

Hm,

 

I don't really understand the question?

 

I mean, are they using a workstation logged in with their "normal" domain credentials? If so, they can't access anything they couldn't already do at work.

 

If its a local account he's connecting with from a workstation not associated with the network he won't see anything beyond the server itself without authenticating to the domain.