Lock down customers access on site

[caimbo]

We have a customer coming to our site next week with his laptop

He has a program on his laptop called Rhapsody. Ive been told that he has an active licence on his machine so it should just be a matter of letting him connect to the network

I need to restrict his access to everything else on the network except for our server on which the licence server program Flexlm runs

What would be the best way to restrict his access

I have created an account on AD which makes him a domain user

Since his computer has never been on our network before there will be no entry in AD for it

Does this then mean that if he tries to make a UNC mapping to our licence server, it will ask him to authenticate and that will be all that is required?

[Mordac85]

If he has a license, why would he need to pull one from your flexlm server? If he needs flexlm using the generic user account you created, given the proper rights on the license server, he should be able to pull the license from there w/o any problems except for some possible reconfig of the program so it knows to pull from your server. Since his system is not in your domain he will get the authentication dialog when he touches one of your network resources. He can enter the credentials you setup and continue on his merry way. However, the account will still let him into anything that a generic user can access, shares, printers, etc.