Locking down Terminal Server

microsoft.public.windows.server.security - Supporting MS Windows network? Read here before it's too late! 

Subject Author Date Locking down Terminal Server Jabooty 05-05-2009  Re: Locking down Terminal Server Anthony [MVP] 05-06-2009  Re: Locking down Terminal Server Jab 05-06-2009

Posted by Jabooty on May 5, 2009, 1:54 pm Please log in for more thread options I have a Terminal Server in a Workgroup environment that I would like to lock down to limit user access. I would like to configure a Group to drop users in with the restricted rights as you would in an AD environment, because I do not want administrative accounts to have the restrictions. Is this possible in a workgroup and if so, how to I go about doing it? Any other recommendations or best practices are welcome. -- Thanks, Jabooty Posted by Anthony [MVP] on May 6, 2009, 1:21 pm Please log in for more thread options Jabooty, You might be best off asking in a TS group, but as I think you already know, you won't be able to apply policy selectively on a 2003 workgroup server. Your choices are: Use a different way to apply settings for users; e.g a logon script writing registry settings Try the Server 2008 Non-Administrator local policy settings. Hope that helps, Anthony, http://www.airdesk.com show/hide quoted text > I have a Terminal Server in a Workgroup environment that I would like to > lock > down to limit user access. I would like to configure a Group to drop users > in > with the restricted rights as you would in an AD environment, because I do > not want administrative accounts to have the restrictions. Is this > possible > in a workgroup and if so, how to I go about doing it? Any other > recommendations or best practices are welcome. > -- > Thanks, > Jabooty Posted by Jabooty on May 6, 2009, 1:43 pm Please log in for more thread options Thanks for your response Anthony and I will post this question in the TS Group. I had thought about the registry route, but wondered if there was an easier way. I am sure it will be fun locating the entries I need to adjust to perform the lockdown. -- Thanks, Jabooty "Anthony [MVP]" wrote: show/hide quoted text > Jabooty, > You might be best off asking in a TS group, but as I think you already know, > you won't be able to apply policy selectively on a 2003 workgroup server. > Your choices are: > Use a different way to apply settings for users; e.g a logon script writing > registry settings > Try the Server 2008 Non-Administrator local policy settings. > > Hope that helps, > Anthony, > http://www.airdesk.com > > > > I have a Terminal Server in a Workgroup environment that I would like to > > lock > > down to limit user access. I would like to configure a Group to drop users > > in > > with the restricted rights as you would in an AD environment, because I do > > not want administrative accounts to have the restrictions. Is this > > possible > > in a workgroup and if so, how to I go about doing it? Any other > > recommendations or best practices are welcome. > > -- > > Thanks, > > Jabooty > > Similar Threads Posted win2k3 ent with sp2 : configure terminal server to use TLS for server authentication is not work!! June 2, 2009, 7:56 am USER AND TERMINAL SERVER July 3, 2007, 7:12 am terminal server client question September 9, 2005, 5:52 pm Sharing a Local Printer in Terminal Server December 5, 2006, 2:50 pm Sharing a Local Printer in Terminal Server December 5, 2006, 2:50 pm Execute access to files from Terminal server August 3, 2007, 2:17 pm taskbar access in WIn 2003 Terminal server July 30, 2009, 8:56 pm audit logon/logoff events on terminal server July 18, 2007, 10:29 am Logon/Logoff Events in Local Security Log of Terminal Server July 20, 2007, 2:39 pm Will Terminal Server Licensing fail if Port 139 is closed on Firew April 28, 2009, 6:44 pm