Click here to get back home

Disallowing console login

 HomeNewsGroups | Search | About
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
Disallowing console login styles.q 05-20-2007
Posted by styles.q on May 20, 2007, 9:41 pm
Please log in for more thread options
Is it possible to disallow console login for certain users/groups?

By console login in mean using RD like so:

mstsc /v:box1 -console

The scenario is that I would like for only one user on the box to be
allowed to login to the console (session 0). This is because the box
is running an application that unfortunately cannot be run as a
service, thus we need to preserve the console login and do not want
any other user assuming session 0.

I know you can disable kicking off an admin logged in to session 0 in
gpedit, but i would like to go one step further and explicity deny the
right to all users except for one.

Is it possible?

Thanks
JS


Posted by jwgoerlich on May 23, 2007, 8:47 am
Please log in for more thread options
Are the users who you wish to deny members of Box1\Administrators?

On May 20, 9:41 pm, style...@gmail.com wrote:
> Is it possible to disallow console login for certain users/groups?
>
> By console login in mean using RD like so:
>
> mstsc /v:box1 -console
>
> The scenario is that I would like for only one user on the box to be
> allowed to login to the console (session 0). This is because the box
> is running an application that unfortunately cannot be run as a
> service, thus we need to preserve the console login and do not want
> any other user assuming session 0.
>
> I know you can disable kicking off an admin logged in to session 0 in
> gpedit, but i would like to go one step further and explicity deny the
> right to all users except for one.
>
> Is it possible?
>
> Thanks
> JS



Posted by jonm on June 13, 2007, 10:16 pm
Please log in for more thread options
Hi Everyone,

I have a problem that is similar to this topic. Is it possible to have
console login eventhough you are not part of the Box\Administrator group? If
I'm going to create a new group (box\console_users) and edit the local
policy, what settings will I be able to edit so that both Administrator group
and the new group will console login?

Is this possible? Hope you will be able to answer my inquiry.

Cheers,

Jon

"jwgoerlich@gmail.com" wrote:

> Are the users who you wish to deny members of Box1\Administrators?
>
> On May 20, 9:41 pm, style...@gmail.com wrote:
> > Is it possible to disallow console login for certain users/groups?
> >
> > By console login in mean using RD like so:
> >
> > mstsc /v:box1 -console
> >
> > The scenario is that I would like for only one user on the box to be
> > allowed to login to the console (session 0). This is because the box
> > is running an application that unfortunately cannot be run as a
> > service, thus we need to preserve the console login and do not want
> > any other user assuming session 0.
> >
> > I know you can disable kicking off an admin logged in to session 0 in
> > gpedit, but i would like to go one step further and explicity deny the
> > right to all users except for one.
> >
> > Is it possible?
> >
> > Thanks
> > JS
>
>
>

Similar ThreadsPosted
Disallowing console login on w2k3 May 20, 2007, 9:41 pm
access to thw WINS management console denied May 31, 2005, 3:39 pm
AzMan: Has anyone created an HTML/Web management console as an alternative to the AzMan MMC? January 4, 2006, 3:18 pm
Login Script Question - Failed Login Count, Location, and Method October 5, 2005, 6:28 pm
Smart Card Login + Certificate Login to AD -> Lost smart card December 15, 2005, 10:03 pm
login October 19, 2007, 4:46 pm
Login Auditing June 17, 2005, 11:05 am
Login Interactively June 23, 2005, 8:20 am
Login Control November 16, 2005, 9:48 pm
Login Domain November 25, 2005, 7:13 pm

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap