Terminal access

[Guest]

Hi All, I have a W2K DOmain 2x W2K DCs and one W2K member server. I want users to be able to logonto the member server only to use resources only available on this server through Terminal Services. What i am trying to do is to remove the nomal stuff like shutdown and restart buttons etc. I can do this through a GPO however to give the group permmision to log on to the sever using TS it seems i need to give them the Log on locally right in the Domain Security policy. I dont want to do this because this means they can then logon at any of the DCs on the network. Is there another way to secure access to this server. I basically just want to make sure they cant restart or change settings while logged on in TS mod
Cheers

 

[Guest]

Move the TS Servers into their own ou and apply the permissions there. I usually create TS_Users groups too and lock their user policies down watertight - no run, no shutdown, no task manager, no cmd etc etc. Apply these policies just to the TS computers and users

Regard

Tony

 

[Guest]

http://www.workthin.com/tshta.ht

Patrick Rous
Microsoft MVP - Terminal Serve
http://www.workthin.co

----- Tony Johncock wrote: ----

Move the TS Servers into their own ou and apply the permissions there. I usually create TS_Users groups too and lock their user policies down watertight - no run, no shutdown, no task manager, no cmd etc etc. Apply these policies just to the TS computers and users

Regard

Tony

 

[Guest]

Tony

If I have an application server running windows 2003 server and terminal services, and remote users coming in are using XP Pro or 2000 Pro, do I need to purchase ADDITIONAL TS CAL's for remote users? THANKS!