configuring restricted user in non ad w2k3 server

[murchison]

How could i make an user to only login, execute a program and logoff(and only that!) in an environment of non ad(standalone) w2k3 keeping in mind that the local gpo is applied over all the users and i want apply the restricted profile over one specific user?
Many thanks in advance.

 

[IllogicallyLogical]

One way you could do this is to create the account for the user and make it a mandatory profile to prevent them from making any changes to their environment. Then go through all the programs and find the executable to every program except for the only one that you want them to be able to run and add their name to the ACL and give them the Deny Full Control Permission. This will prevent them from launching any program other than the one that you don't explicitly deny.

Joey
A+, Network+, MCP