RE: how do I prevent power user from shutting down or rebooting a

Patrick,

I can not get any other user to connect via terminal service except for
power user and administrator. Am I doing something wrong? I have tried to
test both user and mobil profiles but get the error:

The local policy of this system does not permit you to login interactively.

I'm not shur where to set the policy of the local system to allow
interactively login. I'm not sure where you remove the permission on shut
down and reboot for the power user.

What other things would the power user be able to do that I may want to
disable?

Dan Abbuhl



"Patrick Rouse" wrote:

> I didn't mention anything about user profiles, just that it's possible to use
> QB without users having to be members of the Power Users Group. I also
> mentioned that you can remove the power users group from the "Shut down the
> system" right in the local security policy, or via GPO.
>
> Power users get access to all kinds of things, so this is NOT a good solution.
> --
> Patrick Rouse
> Microsoft MVP - Terminal Server
> http://www.workthin.com
>
>
> "dabbuhl1" wrote:
>
> > I tried to setup a user under the "user" and "mobil" profile but I can not
> > log into the terminal server with that user setting. How do I go about
> > taking away the right to shut down or reboot from the "power user" group? I
> > only want them to access the Quick Books program, nothing else. How can I
> > allow a user to log into the terminal server and only allow them access to QB?
> >
> > "Patrick Rouse" wrote:
> >
> > > I believe it's possible to run QB without being a power user. Check the
> > > following info in Vera Noest's Site:
> > >
> > > http://ts.veranoest.net/ts_apps_qb.htm
> > >
> > > You can remove the power users group from the "Shut down the system" right,
> > > via Group Policy or local security policy, however removing users from the
> > > power users group is the best solution, because power users can do workse
> > > things to your server than shut it off.
> > >
> > >
> > > --
> > > Patrick Rouse
> > > Microsoft MVP - Terminal Server
> > > http://www.workthin.com
> > >
> > >
> > > "dabbuhl1" wrote:
> > >
> > > > I am running Windows Server 2003 with terminal services. I use this to allow
> > > > users to run Quick Books from our remote stores. This allows our 4 stores to
> > > > access inventory and post payments from any of our retail stores easily. The
> > > > problem is, everyone that connects via terminal services has to be a power
> > > > user to access the Quick books program. I have tested this out of curiosity
> > > > and forsee a problem down the line. Any user that logs in can reboot or shut
> > > > down the server. How do I prevent or disallow this?
> > > >
> > > >
.

Relevant Pages

  • RE: how do I prevent power user from shutting down or rebooting a
    ... QB without users having to be members of the Power Users Group. ... system" right in the local security policy, ... Microsoft MVP - Terminal Server ...
    (microsoft.public.windows.terminal_services)
  • Re: how can I allow an application to run on TS?
    ... made all users Power Users on your DC. ... MCSE, CCEA, Microsoft MVP - Terminal Server ... SQL troubleshooting: http://sql.veranoest.net ... 2000 Server or Windows Server 2003 running TS. ...
    (microsoft.public.windows.terminal_services)
  • RE: how do I prevent power user from shutting down or rebooting a
    ... > better if the users were not power users. ... >> Patrick Rouse ... >> Microsoft MVP - Terminal Server ... >>> user right assignments and the shut down section which was undefined. ...
    (microsoft.public.windows.terminal_services)
  • Re: Need to give Power Users access to Local Disk Management
    ... configuration settings in Local Security Policy that may help. ... and set that to include power users. ... I have a requirement in a client site to give access of Local Disk ... setup on the same drive letter for the backup, ...
    (microsoft.public.windowsxp.security_admin)
  • RE: how do I prevent power user from shutting down or rebooting a
    ... better if the users were not power users. ... only access quick books, which is the only thing I want them to do. ... "Patrick Rouse" wrote: ... you shouldn't be messing with a production Terminal Server if you ...
    (microsoft.public.windows.terminal_services)