RE: Disabling Terminal Service access by default

From: Peter Johnson (pjohnson@techskills.com)
Date: 01/21/02 

From: "Peter Johnson" <pjohnson@techskills.com>
To: <focus-ms@securityfocus.com>
Date: Mon, 21 Jan 2002 11:57:03 -0600

This one worked for me. After changing the key, you'll need to manually
reassign any accounts that need access.

http://www.ntfaq.com/Articles/Index.cfm?ArticleID=21489

-Peter

-----Original Message-----
From: Jean-François Asselin [mailto:jfasselin@micrologic.ca]
Sent: Monday, January 21, 2002 10:36 AM
To: Bryan Allerdice; focus-ms@securityfocus.com
Subject: RE: Disabling Terminal Service access by default

You could define a policy in the active directory that disables that
right, except for suers you specify in the policy.

> -----Original Message-----
> From: Bryan Allerdice [mailto:bryan_allerdice@yahoo.com]
> Sent: January 19, 2002 15:02 PM
> To: focus-ms@securityfocus.com
> Subject: Disabling Terminal Service access by default
>
>
> When I add users to a Windows 2000 server, they are granted
> Terminal Service access by default.
>
> How do I deny them access by default.
>
> I understand that one answer will have to do with the rights
> of a user, based on what group they are part of, but I am
> also (mainly) interested in what part of the registry causes
> the Grant Access Via Terminal Services checkbox to be checked.
>
> Recently I've been using the ADDUSERS tool from the resource
> kit, and to the best of my knowledge, I don't have the
> ability to define Terminal Services access via this tool,
> which is why I'm asking.
>
> Any help would be appreciated.
>
> BRYAN
>
>
>
> _________________________________________________________
>
> Do You Yahoo!?
>
> Get your free @yahoo.com address at http://mail.yahoo.com
>
>
>
>

Relevant Pages
Quantcast