Re: Need help configuring security on a stand alone terminal server.

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Okay, I see what you mean.

The instructions are written for the most part at the click-
by-click level of detail. This is the primary reason for the large number of steps.

The steps can be boiled down to this: Create a group and user, set permissions and ownership on three folders and a file, and then create a shortcut. The entire initial setup process can be completed in under a minute.

I have a program that completes all of the steps and then copies a pre-made set of policy settings but I thought it is better for people to understand if I explain the manual procedure.

The benefits:

- Policy settings *only* apply to non-Administrators
- Policy settings can be changed easily by double-clicking a shortcut and entering the password.
- No fear of admins being locked out because they gave themselves ntfs permissions to edit the settings, thus triggering the settings to be applicable to them

The end result is an experience close to that of a domain based GPO (with the obvious limitations you already mentioned). I think if I typed up click-by-click instructions for setting up a domain GPO and making it so that it does not apply to admins you would notice a similar "ugliness".

Once the inital setup is complete, the solution is clean for what it is. Recently I had a server that has been in use since 2001? that I needed to change one of the rights assignments, which led me to discover the flaw I mentioned to the original poster. Other than that I have not experienced any issues. As I said before, I changed the steps to correct the issue, but have not had a chance to type them up.

Other than looking at it on the surface, have you actually gave the instructions a try on one of your lab machines?

-TP

Jeff Pitsch wrote:
The sheer amount of steps that you posted cracked me up. if that's
not ugly, i don't know what is :)

.

Relevant Pages

  • Re: Need help configuring security on a stand alone terminal server.
    ... I have a program that completes all of the steps and then copies a pre-made set of policy settings but I thought it is better for people to understand if I explain the manual procedure. ... I think if I typed up click-by-click instructions for setting up a domain GPO and making it so that it does not apply to admins you would notice a similar "ugliness". ...
    (microsoft.public.windows.terminal_services)
  • Re: Sharepoint 2007 searching PDFs
    ... install Ifilter .. ... But all the instructions refers to something like: ... and then click Site Settings. ...  On the Specify File Types to Include page, ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: Slow internet access
    ... Unfortunately writing step by step instructions ... Clean and refresh your Network settings: ... >> Jack. ...
    (microsoft.public.windowsxp.network_web)
  • Re: turn off ALL automatic formatting PERMANENTLY, FOREVER
    ... http://word.mvps.org/FAQs/AppErrors/MissingMenusEtc.htm for instructions on nuking the Word Data key to solve the problem. ... Be aware, however, that if changes in Options settings are not retained, the culprit is often an add-in. ... Microsoft MVP (Word) ... Please include step-by-step instructions in your answer. ...
    (microsoft.public.word.docmanagement)
  • Re: Cannot receive or send Windows Mail
    ... Your receive settings look fine. ... Port 587 is not mentioned in the above instructions, ... Your server has unexpectedly terminated the connection. ... been using but I would like to use Windows Mail as I used Outlook express ...
    (microsoft.public.windows.vista.mail)