Limit logins on a workstation within an NT domain?

[Albion]

I have a workstation in a remote area of our plant. This machine isn't seen much by people in the plant so it's a prime candidate for "tom foolery" (I knew you guys would love that one). What I would like to do is limit that workstation to a certain number of key logins. In other words I only want 4 people in the company to be able to log into that machine without having to set up a secure domain user just for that station. I know NT has an option to only allow a user to log into specific workstations but it's limited to only 8 instances. I would like to see something opposite of that where a workstation is limited to a certain number of users.

Is there anything out there for NT 4.0 (Not 2000, it's a good 6 months before I do the migration) which will accomplish this task on a domain level?

 

[peterve]

Hmmmm you could do a auto-logon, and restrict the registry so they can't disable the auto-logon feature
This way the NT workstation will automatically log on to the domain using a specific user
Note : this is a possible security risk, so make sure that specific user does not have many rights, and also implement policies to lock down his account & the computer he's logging onto... Peter Van Eeckhoutte
peter.ve@pandora.be

 

[kjonnnnn]

I dont know about limiting... but couldnt you only give accounts on that computer to the 4 people you want to login on it. IF User1, User2, User3 and User4 have accounts on the machine, STaylor cant login to the machine locally. And if Staylor logs in using their network password, its gonna create a profile with their ID and you'll know which unauthorized employee logged in....

 

[Psychpt]

Your best bet is to try a batch file.
you could either set up login scripts (messy)
or have a batch file run on startup of that machine, just make sure to put it in all users or the registry.

there are variables you can use in the batch file like

%USERNAME%
%MACHINENAME%
and many more
you could download many programs that automatically log you off or power down the system just put
if %USERNAME% <> whatever names are allowed and
%MACHINENAME% = the name of the restricted computer
run this program to reboot or log you off

a little backwards but I think it should help you out a little