Re: Terminal Server on a Domain Controller

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Simply stated, the LAST thing you want is users logging into your domain
controller! If you must, you can change the policy to allow interactive
logons to a DC in your default domain and/or domain controller policy. But
I'd not consider this an option. Install the applications you want your
users to run on a separate server. Users can screw up a workstation beyond
any reasonable hope of recovery in mere minutes - you don't want them doing
that to your DC!

....kurt

"Joe Leavy" <NOSPAM-joe@xxxxxxxxxxx> wrote in message
news:WGO7f.17867$R5.1699@xxxxxxxxxxxxxxxxx
> Hello,
> Win2003 Server with terminal server and active directory running on it.
>
> Administrators can log on via the TS, however normal "users"
> cannot.....what setting am i missing and where?
>
> //Joe
>


.

Relevant Pages

  • NAT-T / IPSEC issues......
    ... I have an IPSEC policy set between a W2K3 server in a DMZ ... and a W2K3 Domain Controller on the internal network. ...
    (microsoft.public.security)
  • Re: shadow console connection through terminal connection on server 20
    ... |> | i checked the policy both on the server i'm trying to control, ... |> | the sole domain controller on the network. ... |> available on some standalone server. ... | i can't seem to shadow. ...
    (microsoft.public.windows.terminal_services)
  • Re: Terminal Server Log on Problem with New Ad 2003
    ... 1.Allow log on through Terminal service in this add the ... policy check for the same there also. ... >> terminal server option, when i try to log on the AD ... >> (main domain controller and including all the server) i ...
    (microsoft.public.windows.group_policy)
  • Re: Can you make XP machines always wait for the network by sending a GPO from Windows 2003?
    ... Bear in mind that it will take two logons to ... > Policy and I edit that policy there. ... > In a test environment I have a Win 2003 server with some xp clients. ... > My question is how do I send that group policy to EVERY xp client without ...
    (microsoft.public.windows.group_policy)
  • Re: Can not turn firewall off - option is grayed out
    ... It does say firewall is being controlled by the domain. ... know that the installation of server 2003 was the cause. ... full time IT person, actually I am the Controller, but have been elected as ... change the domain policy. ...
    (microsoft.public.windowsxp.security_admin)