Remote Desktop Users and Least User Rights



We have undertaken a project to switch all of our users to standard user
accounts (no administrative rights on the local machine). We have many
users that are setup so that they can access their computers from home.
We've noticed that when the user is removed from the Administrators
group, the list of authorized remote users (My Computer > Properties >
Remote tab > Select Remote Users) gets wiped out. An administrator then
has to log on to the machine and add the user back to the list.

I can see why this would happen, but it does present something of a
problem for us. I would prefer not to have to fix this problem on
hundreds of machines. Is there a way that we can retain the list of
authorized remote users when we remove the employees administrative
rights on the machine? Also, is there some way--perhaps a script--that
we can identify the machines were remote users have been setup?

--Tom
.



Relevant Pages

  • Re: Remote Desktop Users and Least User Rights
    ... the Administrators group, the list of authorized remote users (My Computer ... Remote tab> Select Remote Users) gets wiped out. ... or you could create a simple startup script assigned via GPO to add them. ... You can create/link a new GPO at the appropriate OU where your computers ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Password required for sharing printer across network??
    ... Do I also need to give users on those other PC's rights to certain ... suspected their remote users need to have write privelages to wherever ... if I make set the users from those other PC's as Administrators ... > Windows Printing Team ...
    (microsoft.public.win2000.printing)
  • Remote Desktop Users and Least User Rights
    ... users that are setup so that they can access their computers from home. ... We've noticed that when the user is removed from the Administrators ... the list of authorized remote users (My Computer> Properties> ... Remote tab> Select Remote Users) gets wiped out. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: IIS 4.0/NTFS/A.D.
    ... I have setup the appropriate users in the local domain ... administrators group. ... to the local machine groups. ... The server is a D.C. in it's own domain. ...
    (microsoft.public.inetserver.iis.security)
  • Re: User Privileges
    ... click on Groups and double click on Administrators. ... domain users account. ... > Yser user01 has administrative privilages on the local machine. ... > privileges on local machines. ...
    (microsoft.public.windows.server.general)