I am pretty new to this, and I need a little help...

Right now, when we set up any new computer in our office, we change
the following two settings:

1) Set the Remote Desktop Manager service to Disabled
2) Set the following registry key to '1':
HKLM\SYSTEM\CurrentControlSet\Control\Terminal
Server[fDenyTSConnections]

Is there way to set up a Group Policy so that individual computers of
my choice get these settings turned back on (Enabled, and '0')? (and
also, if possible, assign a certain global group permission to Remote
control the PC)

Optimally, I want to create a global group (ie., 'Remote Control
Computers')that I can make certain computers members of and (after the
next reboot?) they are all set up to be Remote Controlled by whoever
is in a 'Remote Control Users' group

Thanks... your help is GREATLY appreciated.

Cory

You can create an OU and place the clients in the OUs that should have
remote desktop disabled. Apply a group policy to them that disables Remote
desktop. For info on the policy setting see the link below

306300 How to Disable Remote Desktop by Using Group Policy
http://support.microsoft.com/?id=306300

--
--
Tim Hines, MCSE, MCSA
Windows 2000 Directory Services

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.



"LUE42" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> I am pretty new to this, and I need a little help...
>
> Right now, when we set up any new computer in our office, we change
> the following two settings:
>
> 1) Set the Remote Desktop Manager service to Disabled
> 2) Set the following registry key to '1':
> HKLM\SYSTEM\CurrentControlSet\Control\Terminal
> Server[fDenyTSConnections]
>
> Is there way to set up a Group Policy so that individual computers of
> my choice get these settings turned back on (Enabled, and '0')? (and
> also, if possible, assign a certain global group permission to Remote
> control the PC)
>
> Optimally, I want to create a global group (ie., 'Remote Control
> Computers')that I can make certain computers members of and (after the
> next reboot?) they are all set up to be Remote Controlled by whoever
> is in a 'Remote Control Users' group
>
> Thanks... your help is GREATLY appreciated.
>
> Cory