security based on location or geography

From: Donald Endres (endresd_at_temple.edu)
Date: 06/28/03 

Date: Fri, 27 Jun 2003 16:44:04 -0700

I handle software configuration and management in a multi-
site organization, but I have no access to routing or
switching policies.

Inside a single windows 2000 domain,
I have several computers (a, b, c, d, and e).

There are printers, shares, scanners, and applications on
these computers.

There are many users in the domain (Jo, Bob, Ann, Carl)

I need a way to set security policies that work like this:

If the user is Jo and the user is logged onto computer "a"
Then give access to the printer
Else deny access to the printer

For any user in the domain, if they are logged onto
computer b, c, or d
Then give access to the share
Else deny access to the share

I had hoped that in active directory, one might set access
control based on computer accounts, but I have not been
able to do this.

In summary, I need a way to set access control based on
geography, not group membership.

Can this be done?

endresd@temple.edu