Restricting Access to Application(s) on Point of Sale system

Posted by BSchlinker on Server Fault See other posts from Server Fault or by BSchlinker
Published on 2011-01-18T00:17:08Z Indexed on 2011/01/18 0:55 UTC
Read the original article Hit count: 282

I have a customer with two point of sale systems, a few workstations and a Windows 2003 SBS Server.

The point of sale systems are typically running QuickBooks Point of Sale and are logged in with a user who has restricted permissions / access (via Group Policy). Occasionally, one of the managers needs to be able to run a few additional applications -- including some accounting software.

I have created an additional user for this manager, allowing them to login and access the accounting software. The problem is, it can be problematic to switch users on the system, as QuickBooks takes a few minutes to close (on POSUser) and then reopen (on ManagerUser). If customers are waiting, this slows things down drastically.

Since the accounting software is stored on a network drive, it would be easiest if the manager could simply double click something, authenticate against the network drive / domain controller and then the program would launch. When they close the program, the session to the network drive would be lost and the program would no longer be accessible.

Is there any easy way to do this? Both users are on a domain and the system is Windows 7. I just don't want to require the user to switch back and forth. In a worst case scenario, they forget to switch back and leave the accounting software wide open.

© Server Fault or respective owner

Related posts about security

Related posts about active-directory