Grant access to web server but block access to domain: HOW?

From: John Krueger (fredd_krueger@hotmail.com)
Date: 08/30/02 

From: "John Krueger" <fredd_krueger@hotmail.com>
Date: Fri, 30 Aug 2002 09:20:24 -0400

Hi folks. My situation is as follows:

3 Windows 2000 domain controllers--one domain
1 web server

We frequently have consultants who work on our web site. We only want them
to have access to the web server via FrontPage. So, what we have done up
until now is create a user account on the web server itself. This way, they
do not have access to any other machine in our domain. Indeed this is one
way to accomplish this.

However, I would rather create the accounts on the domain under an OU called
"Consultants" since the accounts will be replicated and won't have to be
recreated in case the web server dies. Problem is that they can log in to
our domain and have access to things that other users have access to. Okay,
maybe not everything but at least some things are available to all users
that we don't want the consultants to have access to.

So, what is the best way to accomplish this? I've tried setting the LOGON
TO option in the users' profile to the name of the web server. I figured
that would work but FrontPage keeps sending back access denied messages even
though the consultants domain account has access. Should I be looking at a
gpo for this?

Thank you for any suggestions.

Relevant Pages

  • RE: How to enable IWA over multiple servers
    ... Boot up computer and logon as ActiveDirectory username (im joe ... a member of 192.168.0.4 (the web server), ... through a local account on the webserver rather than a domain user ... Microsoft MSDN Online Support Lead ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • RE: How to enable IWA over multiple servers
    ... Boot up computer and logon as ActiveDirectory username (im joe ... a member of 192.168.0.4 (the web server), ... client domain identity correctly when the ASP.NET app is hosted on ... through a local account on the webserver rather than a domain user ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • RE: How to enable IWA over multiple servers
    ... Developing More Secure Microsoft ASP.NET 2.0 Applications ... how are you accessing the web server? ... Boot up computer and logon as ActiveDirectory username (im joe ... are you logon through a local account on the webserver rather ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Working on a Web Server 2003
    ... I'm not trying to install the web server on a DC. ... > Are you trying to setup and secure a webserver on a DC? ... > A built in account that has a high level of access rights ... Network Service: ...
    (microsoft.public.inetserver.iis)
  • Re: Working on a Web Server 2003
    ... I'm not trying to install the web server on a DC. ... > Are you trying to setup and secure a webserver on a DC? ... > A built in account that has a high level of access rights ... Network Service: ...
    (microsoft.public.windows.server.active_directory)