> > We provide cdrom services to some public workstations
> > in our library
> > from SERVER1. Of course there are students who shell
> > out of some of
> > these applications and login to another server on the
> > net (ie: SERVER2
> > where they have an account). We want to prevent users
> > on the public
> > machines from accessing servers other than SERVER1.
>
>If you create accounts for the CD-ROM servies (ie. CDROM1, CDROM2, etc. - one per workstation) and have a batch file log them in (no password), you should be able to:
>
>- Run SYSCON and edit the settings for each of these users.
>- Somewhere there, should be a setting for servers that can be logged into.
>
>If you set this to SERVER1 only, the worst than can be done is that the users will be able to log out of the CDROMx accounts, but not log back into any other.
>
>Cheers, Ben
>
Another approach would be to "disallow" the users to shell out of the
application(s) by not making COMMAND.COM available to the application, or to
make a program that simply exits and call it COMMAND.COM in the
applications directory. You may have to change COMSPEC to make that work.
