Terminal access

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Hi All, I have a W2K DOmain 2x W2K DCs and one W2K member server. I want users to be able to logonto the member server only to use resources only available on this server through Terminal Services. What i am trying to do is to remove the nomal stuff like shutdown and restart buttons etc. I can do this through a GPO however to give the group permmision to log on to the sever using TS it seems i need to give them the Log on locally right in the Domain Security policy. I dont want to do this because this means they can then logon at any of the DCs on the network. Is there another way to secure access to this server. I basically just want to make sure they cant restart or change settings while logged on in TS mod
Cheers
 
Move the TS Servers into their own ou and apply the permissions there. I usually create TS_Users groups too and lock their user policies down watertight - no run, no shutdown, no task manager, no cmd etc etc. Apply these policies just to the TS computers and users

Regard

Tony
 
http://www.workthin.com/tshta.ht

Patrick Rous
Microsoft MVP - Terminal Serve
http://www.workthin.co

----- Tony Johncock wrote: ----

Move the TS Servers into their own ou and apply the permissions there. I usually create TS_Users groups too and lock their user policies down watertight - no run, no shutdown, no task manager, no cmd etc etc. Apply these policies just to the TS computers and users

Regard

Tony
 
Tony

If I have an application server running windows 2003 server and terminal services, and remote users coming in are using XP Pro or 2000 Pro, do I need to purchase ADDITIONAL TS CAL's for remote users? THANKS!
 
Back
Top