Generic ID's under Active Directory

[Rahven]

I'm just getting back into the wonderful world of AD after being out of it for a full 2 years. Work is migrating from Netware to AD, and we have a ton of 'generic' ID's so that maintenance and dock people can just walk up to a PC and logon.

Obviously, this is a security risk, and we want this to be minimized. However, many of the proprietary applications that we run rely on these generic ID's to operate.

So, I'm trying to find, and haven't been succesful, a way to allow a 'group' login for the Domain.

Is it possible to create a group and just add users to it, having them log in with the group name?

Any help would be greatly appreciated,
Thank you

 

[rvnguy]

Rahven,

Is it possible to create a group and just add users to it, having them log in with the group name?

Not quite, as the sys would only know the group name as a user, there would be no user validation.

One normal way that this is done is to create groups, i.e. a "dock" & "maintenance" group. Set the applications to or their directories to be accessable only to those groups. Make the users part of that group. They will logon with their username/pass and be allowed to access these apps.

I could be confused by your statement that the apps require the Generic ID's. If it is the actual ID that is needed, you can setup this as a user and allow multiple logons. You already know the security risk.

rvnguy
"I know everything..I just can't remember it all