Re: SBS access through RWW for non domain admins (SBS2003)

How about making the user a member of the Domain Power Users Group: (if this
doesn't work through RWW, you may have to set up a straight RDP to the
server).

http://support.microsoft.com/kb/841188
--------------------------------------------
To grant a user the right to make a Remote Desktop connection to the Windows
Small Business Server 2003-based computer to perform administrative tasks,
apply the Power Users Template to that user account. You can apply this
template when you create the user account or by running the Change User
Permissions Wizard.

Important When you apply the Power Users Template to a user account, that
user account is specifically denied access to log on to the Windows Small
Business Server 2003-based computer from the local console. Therefore, do
not apply this template to an Administrator account. For more information
about how to apply templates to user accounts, see the "Manage users and
groups" topic in Windows Small Business Server Help and Information.
--------------------------------------------

--
Merv Porter [SBS-MVP]
============================


"Merv Porter [SBS-MVP]" <mwport@xxxxxxxxxxxxxxxxxxx> wrote in message
news:%23PGJZ736JHA.1416@xxxxxxxxxxxxxxxxxxxxxxx
Sorry, I missed that your goal was to access the SBS server and not a TS.

--
Merv Porter [SBS-MVP]
============================

"Merv Porter [SBS-MVP]" <mwport@xxxxxxxxxxxxxxxxxxx> wrote in message
news:eT8sq236JHA.1764@xxxxxxxxxxxxxxxxxxxxxxx
Hi David,

Have a look at this thread (especially the last couple of replies in the
thread).

Remote access to member server
http://groups.google.com/group/microsoft.public.windows.server.sbs/browse_thread/thread/162e712aba5e5992/12241cb7d7b2ed98?hl=en&ie=UTF-8&q=re:+Remote+access+to+member+server
----------------------------------------
In the end this worked:

1) Create a new "mobile" user for the contractor, no email.
2) Remove the "Domain User" group from the user (leave others for now).
3) Restrict the new users "Log On To... " rights to just SBS (for RWW)
and
the member TS.
4) Add this user as an administrator on the member TS server.

With this setup the contractor uses the RWW screen and logs in with their
login. They then use the "Connect to my company's application-sharing
server" link to logon to the member terminal server with the same login.
On
this setup the HISERVER isn't shown and they can't use their login to
login
to any other PC's so I think it's fairly secure. I do trust this
contractor
(you are all trustworthy, right? ;-) , so I'm not too worried. Once the
job
is done I'll disable the user until it's needed again.
----------------------------------------

--
Merv Porter [SBS-MVP]
============================

"DavidKay" <DavidKay@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:33214AB5-8F37-464C-8CD9-E6205ACDA4E2@xxxxxxxxxxxxxxxx
Hello everyone!

I've got to configure our network to enable a 3rd party access to our
SBS
server through RWW. However I don't want to make them a user of the
domain
admin security group. I've had a look at making them 'server operators'
and
'remote operators' and configured them to be able to have access to
remote
control the server (through system properties) but whenever I test this
account logging into RWW I do not get the option to connect to the
server,
only the client pcs.

Connecting as the domain administrator to RWW does give me the option to
connect to the SBS.

Is there a local computer security setting, or default domain controller
security setting that I should be investigating, or is it just
impossible for
non-domain admins to connect to SBS through RWW.

Thanks!

-dk






.

Relevant Pages

  • RE: Need to login 4 times for RWW access
    ... I have the problem for RWW for all users ... did you make any changes on the SBS Server recently? ... If you create another user account with Add User wizard, ... Suggestion 0: ...
    (microsoft.public.windows.server.sbs)
  • Re: FQDN for Leafnode
    ... (Have you made your user account a member ... Ubuntu makes the first user created a member of admin. ... thus inadvertently giving ten-year-old Anna admin powers ... ... server = news.individual.net ...
    (news.software.readers)
  • Re: RWW - SERVER DESKTOPS for Non Administrators (Remote Desktop)
    ... I think the easiest way would be to take a different tack, as RWW isn't ... It is possible to directly access the member servers from the internet via ... I do get the App server menu. ... users' accounts are members of the local Administrators group on the ...
    (microsoft.public.windows.server.sbs)
  • Re: Allow Log On Through TS GP - SBS2k3 RWW Group - Deny RDP to se
    ... server locally. ... However, Domain Power Users is a member of Print Operators, ... The RWW group does just what it says - allows access to RWW - without ...
    (microsoft.public.windows.server.sbs)
  • Re: Sharepoint Company Web over RWW
    ... I created a new power user and logged on RWW, ... >Create a new user with the wizard - user template is ... >> The User account is enabled ...
    (microsoft.public.windows.server.sbs)
Quantcast