RE: Limiting Users rights in RWW



Hi Cohen,

Thank you for posting in SBS newsgroup.

AS I know, you may not do so because there are only 2 profiles for normal
user and Administrator on RWW. It is determined by the flags in registry
whether the links in the RWW is displayed or hided.

1. For the Administrator RWW, these are the default settings.


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SmallBusinessServer\RemoteUserPortal\
AdminLinks]
"ClientTS"=dword:00000001 // Connect to Client Desktops
"CM"=dword:00000001 // Download Connection Manager
"Community"=dword:00000001 // Ask the Community
"Help"=dword:00000001 // View Client Help
"HelpDesk"=dword:00000001 // Monitor Help Desk
"OWA"=dword:00000001 // Use Outlook Web Access
"PerfReport"=dword:00000000 // View server perfomrance report
"RA"=dword:00000001 // Provide Remote Assistance
"RPC"=dword:00000001 // Configure Outlook via the Internet
"ServerTS"=dword:00000001 // Connect to Server Desktops
"STS"=dword:00000001 // Administer the company's internal Web site
"UsageReport"=dword:00000000 // View server usage report

2. For user RWW, these are the default settings.


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SmallBusinessServer\RemoteUserPortal\
KWLinks]

"AppTS"=dword:00000001 // Connect to my company's application-sharing
server
"CM"=dword:00000001 // Download Connection Manager
"Help"=dword:00000001 // View Remote Web Workplace Help
"OWA"=dword:00000001 // Read my company e-mail
"RPC"=dword:00000001 // Configure your computer to use Outlook via the
Internet
"STS"=dword:00000001 // Use my company's internal Web site
"TS"=dword:00000001 // Connect to my computer at work
"UsageReport"=dword:00000000 // View server usage report

Note:

1. Some flags will vary depending on specific wizards that have been, or
not yet run. (example - PerfReport)
2. 1 = display, 0 = hide

In addtion, when domain users connect to the RWW site and select to connect
to the desktop, system will automatically check the domain client computers
from Active Directory, list all available client computers and add them to
the computer list.

NOTE: If the user account is an administrator, he will find 'Connect to
Server Desktops" and "Connect to Client desktops" link and if the user
account is not an administrator, there is only one link "connect to my
computer at work".

If you joined the SBS Client computer to SBS Domain by the Connectcomptuer
page, only local administrator is granted with the permission to setup
remote desktop. No user account is added to the Remote Users group. Which
means, only the local administrators members can setup the RDP connection,
which by default is the Domain Administrator and the user who use the
computer (if you grant them with the local admin permission).

If the user account does not have local administrator account on the client
computer, he will not be able to setup the connection.

Hope the information help and I look forward to your reply.

Best regards,

Crina Li (MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.

=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| From: "Alistair Cohen" <allstar.cohen@xxxxxxxxx>
| Newsgroups: microsoft.public.windows.server.sbs
| Subject: Limiting Users rights in RWW
| Date: 18 Sep 2005 21:46:37 -0700
| Organization: http://groups.google.com
| |
| Hey, I'm rather new to SBS and i was wondering, is there any way to
| limit what parts of RWW a user can access? I know that administrators
| are allowed to use Remote Desktop to access servers, however for some
| users i require access to all areas of the intraneet, and yet with some
| users i require that they only be able to see a certain part of the
| intranet (employee scheduling). Is there any way to do this or do all
| users have to suffer?
|
| Regards,
|
| Ac
|
|

.



Relevant Pages

  • RE: RWW fails from Internet
    ... Thank you for posting in SBS newsgroup. ... Can you access RWW using domain ... server" in the "Web Server Certificate" page? ...
    (microsoft.public.windows.server.sbs)
  • RE: Rww Problems
    ... Thank you for posting in SBS newsgroup. ... the problem is that you can access RWW successfully; ... On the SBS 2003 Server open the Server Management console. ...
    (microsoft.public.windows.server.sbs)
  • Re: Baffelling RWW problem
    ... thank you for using Microsoft newsgroup. ... This newsgroup only focuses on SBS technical issues. ... | "special permissions" and all is good in RWW land. ...
    (microsoft.public.windows.server.sbs)
  • RE: Cant connect to my server using RWW
    ... Thank you for posting in SBS newsgroup. ... the problem is that the users can access RWW successfully; ... if they try to connect to server by using ''Connect to server'' ...
    (microsoft.public.windows.server.sbs)
  • RE: windows sbs authentication problem
    ... companyweb, the companyweb shows Administrator. ... Please open Server Management console on SBS ... This newsgroup only focuses on SBS technical issues. ... I am also seeing the authentication problem ...
    (microsoft.public.windows.server.sbs)

Loading