Limiting user accounts

[Phil Calvert]

Hi,

I'm fairly new to the Linux world and I was wondering if this would 
work;

Can I add /bin/false to /etc/shells and then set a user's shell (using 
chsh) to that? I want to limit a user's access to the box.

What I'm doing with this limited account is this; I have set-up a Samba 
server and I want to limit access for some users to only the Samba 
shares. I do want to have some security, so I don't just want to make 
the shares public - however, I would like to make sure that the users 
can't log into a shell. I've already added an AllowUsers to the 
sshd_config file so only I can ssh into the box. Now, I'd like to make 
sure that someone can't just wander by and physically log into the box.


Thanks,

--Phil