What Windows User Accounts Are Necessary

[Cdman]

Thanks in advance for all responses.

Could someone either respond to this post or point me to the right
page/article on the Microsoft Web site. I am administrating a Win2000
Server using a Terminal Services Client, and I need to set my Windows
User Accounts/Permissions properly for security reasons. If I take
the "Everyone" Windows User Account out of the equation, I can not use
the Terminal Services Client properly. Could someone let me know
exactly what Windows user accounts I need to have active in order to
use the Terminal Services Client properly.


Thanks,

Cdman

 

[Vera Noest [MVP]]

I'm not sure about the context of your question. Are you looking
at the security on the rdp-tcp connection, or the file system, or
the right to logon locally or ....?
In general, you cannot *delete* the Everyone entry from any Access
Control List without getting into trouble, but you can *replace*
it with a less wide entry, like Domain Users, Remote Desktop
Users, or even a single specific user account, if that is what you
want.

 

[Matthew Harris [MVP]]

What errors do you receive when you take the everyone
group out of the equation? Where are you removing the
everyone group from?

-M

 

[Cdman]

Thanks for the Response!

I took the "Everyone" Group totally off of the File System, and when I
tried to open IIS it would not open. I am unsure as to what other
Applications I may have not been able to open, but when I put the
"Everyone" group back on the entire File System everything went back
to normal.

 

[Cdman]

Thanks for the Response!

I took the "Everyone" Group totally off of the File System, and when I
tried to open IIS it would not open. I am unsure as to what other
Applications I may have not been able to open, but when I put the
"Everyone" group back on the entire File System everything went back
to normal.

 

[Vera Noest [MVP]]

Yes, that is to be expected. Completely *deleting* the Everyone
Group from an ACL is normally *not* a good idea.
As I wrote, *replace* it with a group with a narrower membership
list.