RE: Client configuration RDP-TCP properties

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Patrick Rouse [MVP] (anonymous_at_discussions.microsoft.com)
Date: 05/10/04 

Date: Mon, 10 May 2004 13:01:11 -0700

Assign this via Group Policy using the loopback policy, then deny the administrator account the apply policy permission in the GPO.

http://support.microsoft.com/default.aspx?scid=http://support.microsoft.com:80/support/kb/articles/q260/3/70.asp&NoWebContent=1

Other how tos:
http://www.workthin.com/tshta.htm

Patrick Rouse
Microsoft MVP - Terminal Server
http://www.workthin.com
     
     ----- Matt wrote: -----
     
     I set the RDP-TCP properties so that when a client logs
     on, the client settings are overriden and a particular
     program automatically starts.
     
     I was hoping however, that when the administrator logs on,
     these settings would not take effect and the Adminstrator
     would be able to go directly to the desktop of the server.
     
     As I found out, this doesn't happen and the program
     automatically starts the same for the Administrator as it
     does for any other client logging on.
     
     Is there a way I can not have these settings apply to the
     Administrator but to all other TS users?
     
     We are using Windows 2000 server with SP4.
     
     Thank you.
     

Relevant Pages

  • Re: administrator locked out of SBS 2003
    ... Try to logon to the console using this account. ... see which groups the administrator is a member of and post back ... Even the VMware KB's as I've all ready discovered the server V2.0 ... so I deleted the policy. ...
    (microsoft.public.windows.server.sbs)
  • Re: Must all users be administrators?
    ... The familiar look of the AD objects tree you see in Group Policy Editor is ... This seems modestly confusing to an SBS Administrator because there's very ... those rights happen to be nearly unlimited. ... sit a workstation logged on as the Local Administrator, by default, there ...
    (microsoft.public.windows.server.sbs)
  • Re: One App Machine
    ... SRP is available in Local Security Policy under ... rule for the executable or a path rule to the folder for the authorized executable. ... > I'm a programmer with almost no experience with policy settings but is has ... > I need to a XP Pro machine with two accounts: Administrator and General ...
    (microsoft.public.win2000.group_policy)
  • Re: GP loopback processing on Windows 2003 terminal service, strange problem!
    ... You should not have to go through all that to get the policy to work ... Check that your other W2003 Server points ONLY to the domain controller ... > any other GP's then logging on to the TS server. ... > is not local administrator on this TS server? ...
    (microsoft.public.windows.group_policy)
  • Re: windows 20000 problem
    ... So you are saying the problem is on just this one particular server that is ... in an OU with other servers that do not lock down the domain admin account. ... The part about logging in as local account that bypasses this policy ... > and the administrator is in an OU where the policy doesnt apply. ...
    (microsoft.public.win2000.security)