Re: Deny administrator logon to terminal services admin mode

Tech-Archive recommends: Speed Up your PC by fixing your registry

Modify the list of groups that are granted the "Allow log on through Terminal Services" right. You can set this via Group Policy or the Local Security Policy.

For example, you could remove all user/groups except the Remote Desktop Users group, and then put the users/groups you want to have the ability to connect via TS in that group. You can use the Restricted Groups feature to lock down membership.

-TP

TheITDude wrote:
Hi

I want to deny access to remote administration on my Exchange member
server for administrators, and grant access only to 2 users (who are
domain admins).

Is there an easy way to do this? The administrators are granted
access by default.

Thank you
.

Relevant Pages

  • Re: user and administrator policies
    ... All you really need to do is give "administrators" deny for apply. ... Be sure to install Group Policy Management Console on your domain controller ... FYI Windows 2003 and XP Pro can use Software Restriction Policies managed ... > administrators mchs\administrators deny group policy ...
    (microsoft.public.win2000.security)
  • Re: Lack Sufficient Administrator Privileges
    ... > Can you open Group Policy editor as in gpedit.msc and if so did you make the ... When you run the command net localgroup administrators ... > root/drive folder, the program files folder, the \Windows folder, the ... >> trying to install Quicktime, ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Run application on remote login
    ... user only to be in enterprise admin. ... administrators group and removed administrators from the enterprise admin ... "Jeff Pitsch" wrote: ... service group policy. ...
    (microsoft.public.windows.terminal_services)
  • Local Group Recursion, Creation, and GP
    ... I have hundreds of embedded systems spread across a college campus. ... administer them largely by Group Policy. ... requireing Admin rights for their software to run. ... We made both of these members of Administrators (so they could run the ...
    (microsoft.public.windows.group_policy)
  • Re: TS Login Problem to challenge the brightest TS Gurus
    ... it is not very likely that group policy corruption on PDC has ... Policy settings that control access to Terminal Services. ... Check permissions on TS Connection object ... Make sure all users are in the LOCAL Remote Desktop Users group on the ...
    (microsoft.public.windows.terminal_services)