Permissions on Windows 2000

[Michael San Filippo]

I have users that are logging into my server (RDP) and I want to make sure
they can't change anything about the TS Configuration/AD Losers and
Computers/Anything critical. I installed the Admin Pack for it since it isnt
my DC because I want to be able to make changes from that server.
I also want to make sure they can only access things on the share I allow
them to and their My Docs path. How is the best way to do this kinda stuff?

 

[Vera Noest [MVP]]

A combination of a restrictive GPO and proper NTFS permissions.
You'll want to use loopback processing of the GPO with the
"Replace" option, to avoid locking down the users workstations.

278295 - How to Lock Down a Windows 2000 Terminal Services Session
http://support.microsoft.com/?kbid=278295

260370 - How to Apply Group Policy Objects to Terminal Services
Servers
http://support.microsoft.com/?kbid=260370

231287 - Loopback Processing of Group Policy
http://support.microsoft.com/?kbid=231287

320181 - HOW TO: Use the Application Security Tool to Restrict
Access to Programs in Windows 2000 Terminal Services
http://support.microsoft.com/?kbid=320181