XP, denying login access without disabling account?

[Paul Victorey]

Here's a question. I have an XP pro machine on a LAN, and I want to have user accounts so others can access shared folders remotely, without allowing them logon access to the machine locally. As far as I can tell, it's all or nothing -- either their account is enabled, allowing login and share access, or disabled, in which they can't do either.

Is it possible to allow share access with a user/pass but not login? I absolutely despise when others use my computer w/o permission, so I'd rather nobody even be able to login.

[lil Jimmie]

To do that, you would need to logon to a domain with the appropriate accounts and permissions to allow those types of shares. Without a local account there is no user authentication.

[pointd]

Create an account on your machine with a username that matches the username on the users own machine. Whilst you are creating the accounts have the users set the password to match that of their own machine.

Once all the accounts are created click Start | Run and type "secpol.msc" without the quotes. This should open up the Local Security Policy. Expand Local Policy and click on User Rights Assignment.

In the right hand window double click on "Deny logon locally" and add your users as necessary.

The above is for Windows 2000 Pro. I am sure that the process will be very similar for XP.

[KHT]

If you are on a domain, users can log onto any machine and overide local settings. However, the admin can specify what machines users can\cannot log onto but would have to type in every machine for every user in active directory individually, eliminiating yours which would then deny access.

And this will only work if Netbios over TCP\IP is enabled at the server. (most likely is)