RE: Remote Administration problem after upgrading to 2003

From: Richard Frueh (RichardFrueh_at_discussions.microsoft.com)
Date: 12/07/04


Date: Tue, 7 Dec 2004 08:49:03 -0800


"Vera Noest [MVP]" wrote:

> OK, I wasn't thinking clear, and became confused about the number
> "2", since 2003 actually allows 3 concurrent connections: 1 to the
> console and 2 normal rdp sessions.
> Let's try to tackle this problem from another direction: since the
> problem disappears when you remove the server from the domain, it
> is most likely caused a GPO.
> Have you tried to define a local policy which overrides any domain
> wide GPOs, and comfigure the setting there?
>
> Computer Configuration\Administrative Templates\Windows Components
> \Terminal Services
> Limit number of connections

OK, turns out it was a bad GPO all along. We have 2003 servers installed,
but very few, and no DCs. So, the domain policies are all doen with the W2k
and XP adm files. However, all of the "built-from-scratch" servers use their
own local policy, which is the 2k3 one, and allow 2 session, and all of the
upgraded ones are using the W2k + XP policies, and there is an unconfigurable
limit of 1 session. (It's unconfigurable, since I couldn't see it in GP
Edit, but I could see it in the RSOP listing.)

I replaced the WXP system.adm on the DCs, and did a template replace in GP
Edit, and bang! Computer Configuration\WIndows Components\Terminal Services
exists to edit. Changed max sessions to 2, and all the servers are now happy.

Thank you - and now I can go back to working on all of the fires.

Rich



Relevant Pages

  • Re: nessus scan
    ... Null sessions do NOT allow unauthenticated access to data on ... > when XP Pro users try to change their domain passwords at logon. ... > downlevel clients to access those servers. ... > auditing for account logons events and account management on domain ...
    (microsoft.public.win2000.security)
  • Re: How to protect my terminal servers?
    ... If I turn this all on from the console, will it apply it to all user sessions? ... hassle of downed or rebuilt servers because someone clicked the wrong things. ... I currently have not given users internet access from the TS ... time even with protection. ...
    (microsoft.public.windows.terminal_services)
  • Allowing internet access in Terminal sessions...
    ... MS 2003 server with Terminal servers, IE explorer 7. ... I want to allow my TS users to have internet access from the Terminal ... sessions so that links to web sites etc from within apps are active. ...
    (microsoft.public.windows.terminal_services)
  • Re: exception in thread? in Net::SSH::Multi
    ... nobody is going to be able to help you. ... # define the servers we want to use ... I think you're right and this kind of exception is not handled by the lib. ...
    (comp.lang.ruby)