A client of ours is running Windows 2003 server with Active Directory. As you would expect each user on the domain has their own username and password. They wish to add a new share to their DC for their accounting information. In order to make this share ultra secure they want to create a new Active Directory account called "accounts", which will have permission to the shared accounts folder. The only problem is that the client would like the accounts folder to be mapped and to log in with this new accounts username while logged in as his usual username.

Now I know that Windows 2003 servers don't allow you to log in with two usernames when connecting to network shares. However I'm after a way to resolve this problem so any ideas are welcome!

Soln
What you are talking about is sort of Windows bug that lurked around since NT 3.51 days. Yes, its possible to map to two different shares, using two different usernames on the same server, or evern the same share on the same server. I know you would be surprised I am saying this, but it is true, I have time tested it. The trick is.. to use the IP address (numeric), of the share server and not the netbios or the fqdn.

Try it, open windows explorer, map a drive to a share on the server with one username (the first time you do this, it does not matter, go ahead and use the unc format and use the netbios/wins name eg \\servername\sharename)

Now from the same machine, map another drive, to another or same share on the same server, with an alternate username, but Remember! to use the IP address in the UNC, \\10.0.0.109\sharename, and specify user credentials in the map drive as fields, and provide a different set of credentials (different username and password from the one you are logged on as).

What I suggested above, can also be done using the command line, using the "net use <driveletter>: \\numericip\sharename /user:username password" command.

This fact is very less known, and is true in any version of Windows above 3.5.