Click here to get back home

Limit remote acces to server

 HomeNewsGroups | Search | About
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
Limit remote acces to server Miha 07-06-2008
Posted by Miha on July 6, 2008, 1:18 pm
Please log in for more thread options
Hi

Is it possible to limit remote access to Win2k3 server so that you could
remote connect only to the console session (mstsc.exe /console)?
If I disable remote access than also /console switch doesn't work, but if I
set that only 1 connection is possible to server, it is possible that
besides /console session another admin logs into server, but I want that
/console session will be the only way to remotely connect to a server.
Thank you in advance
Regards,
Miha



Posted by Jeff Pitsch on July 6, 2008, 5:28 pm
Please log in for more thread options
VNC :)

Jeff Pitsch
Microsoft MVP - Terminal Services


> Hi
>
> Is it possible to limit remote access to Win2k3 server so that you could
> remote connect only to the console session (mstsc.exe /console)?
> If I disable remote access than also /console switch doesn't work, but if
> I set that only 1 connection is possible to server, it is possible that
> besides /console session another admin logs into server, but I want that
> /console session will be the only way to remotely connect to a server.
> Thank you in advance
> Regards,
> Miha
>



Posted by Miha on July 8, 2008, 2:05 am
Please log in for more thread options
Yep I also think that this is the only way :-)
Thanks!
> VNC :)
>
> Jeff Pitsch
> Microsoft MVP - Terminal Services
>
>
>> Hi
>>
>> Is it possible to limit remote access to Win2k3 server so that you could
>> remote connect only to the console session (mstsc.exe /console)?
>> If I disable remote access than also /console switch doesn't work, but if
>> I set that only 1 connection is possible to server, it is possible that
>> besides /console session another admin logs into server, but I want that
>> /console session will be the only way to remotely connect to a server.
>> Thank you in advance
>> Regards,
>> Miha
>>
>
>



Posted by rob3rdflr on July 8, 2008, 2:21 pm
Please log in for more thread options
Miha,

It is possible to restrict Terminal Server to allow only one remote session
and force that session to be the console session.
I do this on several Win 2003 Term boxes.

1. In RDP-TCP properties, set maximum connections to 1 on the Network
Adapter tab.
2. Add the Everyone group to the Permissions tab.
3. Select the Everyone Group in the Group or user names area.
4. Choose the Deny permission for Guest Access in the Permission for
Everyone area.

This will permit only one connection to the server and only through the
console (session 0).

Happy TSing :)
Rob Harbin III


"Miha" wrote:

> Hi
>
> Is it possible to limit remote access to Win2k3 server so that you could
> remote connect only to the console session (mstsc.exe /console)?
> If I disable remote access than also /console switch doesn't work, but if I
> set that only 1 connection is possible to server, it is possible that
> besides /console session another admin logs into server, but I want that
> /console session will be the only way to remotely connect to a server.
> Thank you in advance
> Regards,
> Miha
>
>
>

Similar ThreadsPosted
IAS extension to limit max sessions number per user April 2, 2008, 2:15 pm
field length limit in firewall "define port exceptions" GPO? August 14, 2006, 8:08 pm
windows 2k - enabling acces to network connections for non-administrative users December 14, 2006, 8:00 am
Securing Remote Desktop To Server August 11, 2005, 10:30 am
How to store windows events log in remote server July 31, 2005, 6:44 pm
Remote Desktop Protocol Server Private Key Disclosure Vulnerability March 30, 2008, 9:34 am
How To Prevent Local Administrator Credentials from Unlocking Remote Server? July 1, 2008, 1:20 am
Pass Through Authentication chooses wrong user account on remote server?? May 9, 2006, 12:13 pm
Windows Small Business Server 2003 Premium and Remote Desktop June 8, 2006, 6:09 pm
Remote desktop February 21, 2006, 3:25 pm

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap