Re: Disallowing connection to TS by group name

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Harry Devine (hdevine_at_ourapplecart.com)
Date: 09/01/04 

Date: Wed, 1 Sep 2004 06:40:55 -0400

Thanks for the reply. In the MMC, would I add the group(s) that I want in
the permissions tab and check Deny for Full Control, User Access, and Guest
Access?

Thanks again,
Harry

"Patrick Rouse [MVP]" <PatrickRouseMVP@discussions.microsoft.com> wrote in
message news:9D03A041-A6F9-4153-83EE-3A96E2344D65@microsoft.com...
> 1. Add your development boxes to a separate OU and control the
connections
> settings via GPO
>
> or
>
> 2. Do not add these users to the RDP-Tcp connection ACL in each server's
> Terminal Server Configuration MMC.
>
> How tos:
> http://www.workthin.com/tshta.htm
>
> Patrick Rouse
> Microsoft MVP - Terminal Server
> http://www.workthin.com
>
> "Harry Devine" wrote:
>
> > We are in the process of restructuring our username and group assignment
> > structure in our AD. What we want is to have certain groups not have
access
> > to Terminal Server into our development boxes.
> >
> > I know that I can go into each user and uncheck the "Allow logon to
Terminal
> > Server" box, which will work, but can I override this somehow and
disallow
> > connection if a user belongs to a certain group?
> >
> > Thanks for any help,
> > Harry
> >
> >
> >

Relevant Pages

  • Re: New to TS I have two questions:
    ... just the application running in a window. ... MCSE, CCEA, Microsoft MVP - Terminal Server ... How can I control each user access over TS like user can see IE ...
    (microsoft.public.windows.terminal_services)
  • Re: Adventures in DRM land: Sony
    ... >> I thought you advocated that users only have user access and ... SOmeone has to control that ... > Taking away root is a control-phreak issue. ... the supply all the #2 pencils and crappy ball ...
    (comp.sys.ibm.pc.hardware.chips)
  • Re: AD Design question
    ... The Full Control has our Help Desk as it membership, ... You should define your user access of data ... planning to implement Server 2003 AD on a new server. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Shutdown problem with 9.02 Multimedia control panel
    ... I have yet to have a problem with the new Control Center on its own. ... >>Since I upgraded my ATI software to the newest version the computer will ... > and MMC are. ... > just the card driver. ...
    (microsoft.public.windowsxp.hardware)
  • Re: Given a IWebBrowser2 where do I implement IAuthenticate and IServiceProvider?
    ... > I'm using the web browser control from within an mmc.exe snap-in. ... > I know that I have to implement the IServiceProvider and IAuthenticate ... have MMC host it on your behalf. ...
    (microsoft.public.inetsdk.programming.webbrowser_ctl)