How to configure Domain access permissions for a user that would vary based on the computer they log into?

How to configure Domain access permissions for a user that would vary based
on the computer they log into?

I have a server farm consisting of all windows 2003 servers with R2

All my workstations are Windows XP professional with SP2



What I would like is to be able to limit my users access to domain shares
(specifically DFS shares) so that these shares are only accessible while
they are logged into and using one of the Terminal Servers.

I do not want these shares accessible from the XP Pro workstations.



I would like to keep the XP Pro workstations on the domain so i can
implement some GPOs.

I really do not want to limit the XP systems networking (so users can still
do in-office printer sharing, etc) with Group Policies and I would prefer to
have the user use their same login and password for both the XP and Terminal
Server logins.



Does anyone know of any way to achieve this?


Thanks


.

Relevant Pages

  • RE: How to Grant Power Users rights to administrative shares.
    ... This is on windows server 2003. ... right click shares and select new file share ... The "Create A Shared Folder Wizard" opens click next. ... Please check the permission settings of the shared folders. ...
    (microsoft.public.windows.server.sbs)
  • Re: VPN access to network file shares
    ... "The file shares are on a server running Windows Small Business Server ...
    (microsoft.public.windows.server.sbs)
  • Re: Permissions Chart ?? or web site ??
    ... The environments I deal in tend to have tens of thousands of file shares and thousands of local site admins, 99% of whom don't really understand in the slightest bit how Windows works so the most secure way of doing things is the most simple to understand easily automated way. ... In fact, in most environments I have to work on file share stuff for, I redirect them from ad hoc shares to three types of shares per server and the local site admins don't even have to understand what a share is let alone properly configure it. ... One single share per server for apps run from the servers. ...
    (microsoft.public.windows.server.active_directory)
  • Re: DFS and RODC Windows Server 2008
    ... Look into using the Enterprise version of Win 2k8 for the hub server. ... Think about putting all the shares on the branch office server into one ... It sounds like you just want to replicate ...
    (microsoft.public.windows.server.active_directory)
  • Re: Windows domain user is sometimes denied access to server share
    ... I would also check the server with the share security log ... He can access the shares that do not have security on them OK, ... with windows user and or windows group accounts. ...
    (microsoft.public.windows.server.security)