Re: Password Protected Screen Saver and Administrative Password

From: Patton Roub (proub_at_state.wy.us)
Date: 02/09/05

  • Next message: Anzaldo, Oscar: "SAM encripted with syskey" 
    To: focus-ms@securityfocus.com, tom.milliner@verizon.net
Date: Tue, 08 Feb 2005 17:21:44 -0700

    Is this a Windows 2000 Server or Windows Server 2003? If it
    is, then you should consider terminal services in maintenance
    mode. It requires no additional license purchases (two are free)
    and your vendor can connect without going through a fourth
    party's server equipment (GoToMyPC)(trusted?/untrusted?)
    to get there. They would log in as themselves (event logging
    good) and their access rights can be controlled. In terminal
    services, they also would not see your screen saver as they
    would have their own session/desktop/etc.

    Patton Roub, BSEE, MCSE
    proub@state.wy.us

    >>> "Tom Milliner" <tom.milliner@verizon.net> 2/7/2005 8:07:04 PM >>>
     
     
    Does someone know a way to allow a normal user to
    release a server password protected screen-saver
    without giving the user the administrator password?

    I need this so that third-party support can access
    our server via GoToMyPC when I am not there. The
    password protected screen-saver blocks them from
    remote access to fix problems. I cannot always be
    on-site to assist by supplying the screen-saver
    password.

     
    Tom Milliner, CPA, MCSE
    tom.milliner@verizon.net

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------

  • Next message: Anzaldo, Oscar: "SAM encripted with syskey"

    Relevant Pages

    • Re: Win2K3 Terminal Server Un-Install Question
      ... terminal services in Remote Desktop mode is ... If you "enabled" Terminal Services manually using the Manage Your Server ... servers using Windows 2000 tried to do the same with Windows Server 2003. ...
      (microsoft.public.windows.terminal_services)
    • Re: Group Policy does not get inforced
      ... This article looks at how you can use Group Policy to manage Terminal Services environments in Windows Server 2003. ... How to apply Group Policy objects to Terminal Services serversExplains how to apply Group Policy objects to Terminal Services servers in Windows Server 2003 and Windows 2000 Server without adversely affecting other ... ...
      (microsoft.public.windows.server.active_directory)
    • Re: How to disable the local login from showing up
      ... Your Terminal Services Security Website ... >I have never seen Windows 2000 Server or Windows Server 2003 without this ... >> winlogon is not there ...
      (microsoft.public.windows.terminal_services)
    • GPO fails to apply - limit ts users to 1 session
      ... I have an application running on Windows server 2003, standard edition, running terminal services. ... Computer policy and user policy refreshed, but I then got the message "Check the event logs for errors applying group policy". ...
      (microsoft.public.windows.server.networking)
    • Re: GPO not applying - limit ts users to 1 sesssion
      ... I have an application running on Windows server 2003, standard edition, running terminal services. ... Computer policy and user policy refreshed, but I then got the message "Check the event logs for errors applying group policy". ...
      (microsoft.public.windows.group_policy)