Re: Windows Server 2008 TS Error.



I do Know about Group Policies to block access to certain Folder/Drives. Cant
I use any other method to achieve the same.It is security breach and any
technical user can play havoc with DC.I dont know it is default feature of
Terminal Service to expose drive into open or not.If it yes, then it is
colossal security flaw.what i mean there should be a prevention to local
drive of TS server.

regards


"Jeff Pitsch" wrote:

You can use group policy to hide the server drives. Are you familiar
with group policy?

Jeff Pitsch
Microsoft MVP - Terminal Services

S H A R I Q U E wrote:
Now, i am able to logon using domain users thanks to modifcation of local
security policy.
i have installed word viewer on WIN2K8 and provided access to WINXP client
through TS RemoteApp Manager. I can run application at WINXP client
successfully.
one thing which is quite alarming is that after opening WordViewer at client
side.When i goto File/Open, it gives domain user access to root of c driver
and shows my local drive as network drive.
How can i prevent users from accessing drives of WIN2K8 server.??


"Jeff Pitsch" wrote:

Is the terminal server also a domain controller? If not, you need to
add the users to the Remote Desktop User group that is local to the
terminal server.

Jeff Pitsch
Microsoft MVP - Terminal Services

S H A R I Q U E wrote:
I have created a Remote App programe in Windows Server 2008 TS.From Windows
XP client having latest RDC 6.x installed, i can run the application
successfully using Administrator account.When i try to run same application
using domain use account, i get error that "To log on to this remote
computer, you must be be granted the Allow log on through Terminal Services
right. By default, members of the Remote Desktop Users group have this
right...etc..."

i have added the domain user/computer account in Remote Desktop uses group
in AD even after that i am getting error.
what piece of configuration I am missing.bear in mind that i am runnin this
setup in VM with default number of TS licenses, that is, two.

.



Relevant Pages

  • Re: Windows Server 2008 TS Error.
    ... Microsoft MVP - Terminal Services ... How can i prevent users from accessing drives of WIN2K8 server.?? ... add the users to the Remote Desktop User group that is local to the terminal server. ...
    (microsoft.public.windows.terminal_services)
  • Re: Users cant use terminal services !!!
    ... Controller Security Policy. ... MCSE, CCEA, Microsoft MVP - Terminal Server ... on the "Terminal Services profile" tab. ... Did you add your users to the *local* Remote Desktop Users ...
    (microsoft.public.windows.terminal_services)
  • Re: Windows Server 2008 TS Error.
    ... there is a way to prevent users access to the local drives and that is through group policy. ... TRULY concerned about security you'll buy another server and NOT let your users on the domain controller to begin with. ... Microsoft MVP - Terminal Services ... add the users to the Remote Desktop User group that is local to the terminal server. ...
    (microsoft.public.windows.terminal_services)
  • [REVS] Hacking Citrix Frequently Asked Questions
    ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... In this paper wirepair will be outlining how Citrix works, ... Citrix is a Remote Desktop application that is becoming widely popular. ... is similar to Microsoft's Terminal Services, ...
    (Securiteam)
  • Re: More on caching and logging
    ... or do you think it also includes corporate security ... Refusing to boot up is a felony. ... I was going to run down some process involving hard drives ... Apple did to implement this new product or will they allow it to be ...
    (comp.sys.mac.system)

Quantcast