[Last Call] Learn how to a build a cloud-first strategyRegister Now


Limit logins on workstation to a specific file on Netware drive

Posted on 2006-04-19
Medium Priority
Last Modified: 2008-03-06
We have a workstation, in our lab, that we want to only allow only certain users to be able to login and then to have access to one specific folder on Netware.  I have set up a user for all of them to log into Windows with. I want to limit it so when they login to Netware, as their own user on that one machine, it only maps to one specific folder for instance  H:\DataWork\TECHS\STUDY\Soil.  It is a Windows XP machine running Novell client 4.9 sp2.  
Question by:JornadaRange
  • 2
  • 2
LVL 35

Expert Comment

ID: 16489332
Is there a Windoze domain too, or is it a local Windoze user account?  Are they logging in to Windoze first, and NetWare as an afterthought, or NetWare first and then Windoze?  Any reason why they should use their own NetWare login for this specific-function limited-access workstation, and not a special user ID?  Is it a modern NetWare server (5.1 or 6.x or OES, with eDirectory) or an obsolete NetWare server (5.0 or prior, with NDS, or 3.2 or prior, with Bindery)?

One thing you could do is add logic to the login script to see if they're logging into this particular workstation, and if so, to bypass all drive mappings except the one you listed.  If you really want to tighten it up, map it root so the datawork\techs\studu\soil doesn't even show.  H:\ would be all they'd see.

Of course, you'd use a normal NetWare MAP command for the version you're running - the only place "H" would show would be to the right of the equals sign, and you'd preferably use the volume's object on the left side of the equals sign, provided it's modern NetWare.

If you want to try the login script logic workaround, let us know - there's more than one way to skin this cat, and we'd need more info from you to be specific.  Generally, you'd use an "if .. then" type construct.

It's so much easier if you use a generic "test user" NetWare login ID, with the profile/container/system login script bypassed and a user login script with only that single drive/path mapped.  That way, you can also limit the filesystem access rights to only that directory as well.  To enforce not logging in as themselves, you can set up the workstation to do AutoAdminLogin and bypass the GINA altogether.

Author Comment

ID: 16489493
There is a Windows domain, but we did not add this computer to the domain.  They will probably log into NetWare and then Windows.  The  NetWare server is 6.5 and it has eDirectory.  How do I set up what you suggested in your last paragraph, it sounds exactly what we want?
LVL 35

Accepted Solution

ShineOn earned 1000 total points
ID: 16490421

Alternative workaround to the 2nd TID (this is a guess) is install the client without NMAS, and make sure NMAS is disabled in the client properties, Advanced Login tab.

If you need help understanding either or both TIDs, let me know.

Author Comment

ID: 16491147
Got it.  Thanks for the help.

Featured Post

Hire Technology Freelancers with Gigs

Work with freelancers specializing in everything from database administration to programming, who have proven themselves as experts in their field. Hire the best, collaborate easily, pay securely, and get projects done right.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Most folks would know the basics of how Dropbox works, so that’s not the purpose of this article. Security is what it’s all about, so here I’ll share how I choose to secure my Dropbox Account and the Data it contains.
Moore’s Law has proven itself time and time again since it was first introduced. So what’s next? Will Moore’s law continue to remain relevant, or will new technology take over and bring us the next big advancement in computing?
This lesson discusses how to use a Mainform + Subforms in Microsoft Access to find and enter data for payments on orders. The sample data comes from a custom shop that builds and sells movable storage structures that are delivered to your property. …
With just a little bit of  SQL and VBA, many doors open to cool things like synchronize a list box to display data relevant to other information on a form.  If you have never written code or looked at an SQL statement before, no problem! ...  give i…

830 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question