Re: Lockdown remote user but not local login

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

I haven't tried this personally, will ADSI extension for Terminal Services work for you?
Under user account's Terminal Services Profile, there is a per-user property "Deny this user permissions to logon to Terminal Server":
http://msdn2.microsoft.com/en-us/library/aa380657.aspx

Thanks
Soo Kuan


--
This posting is provided "AS IS" with no warranties, and confers no rights.

<bmense@xxxxxxxxx> wrote in message news:1184852013.131102.138170@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
I'm trying to find away to lock down a user when they login through
RDP, but not when they login to there system in the Office.

Currently I've created another user for them to use only when they are
logging in remotely.

Is there another way to create an alias of the original ID?


.

Relevant Pages

  • Re: Deny Logon through Terminal Services Issue
    ... If I recall correctly the user rights to log on via TS or to deny the same ... Windows 2003 SP1 Server Environment ... I set the "Deny log on through Terminal Services" from 'Not Defined' ...
    (microsoft.public.windows.server.security)
  • Re: Threat vector of running a service using a domain account
    ... so I would edit the group policy that is linked to my domain. ... Deny access to this computer from the network ... Deny logon through Terminal Services ... normally I deny access to this computer from the network, deny logon on locally and deny logon through terminal services. ...
    (Security-Basics)
  • Disabling Terminal Service access by default
    ... When I add users to a Windows 2000 server, they are granted Terminal Service ... How do I deny them access by default. ... Recently I've been using the ADDUSERS tool from the resource kit, ... I don't have the ability to define Terminal Services ...
    (Focus-Microsoft)
  • Re: help with domains
    ... You can set up a Roaming Profile and a separate Terminal Services profile in ... the user account. ... also the terminal services need to have have different ... then log on to terminal server and they need different ...
    (microsoft.public.windows.server.active_directory)
  • Re: A variable that = workstation
    ... >> We are looking to redirect the Terminal Services Profile ... >> (user profile) to a share on the terminal server that ...
    (microsoft.public.win2000.active_directory)