Terminal Services - Domain Controller - Normal User

From: Robert Abela (robert_at_gfi.com)
Date: 02/25/05

  • Next message: Jim Masson: "RE: Computer accounts in NTFS permissions" 
    Date: Fri, 25 Feb 2005 09:06:50 +0100
To: <focus-ms@securityfocus.com>

    HI,

    To log on via terminal Services (administration mode) on a Domain
    controller one needs to be an Administrator of the domain (like a member
    of the enterprise administrators, or domain administrators etc), since a
    domain controller doesn't have its own groups.

    Are there any particular permissions or way to set it up to give a
    normal user logon access (via terminal services, administration mode) to
    the domain controller?

    Kind regards,

    Robert Abela - GFI Software Ltd. - www.gfi.com
    Messaging, Content Security & Network Security Software
    GFI: MailSecurity - FAXmaker - MailEssentials - LANguard

      
    This mail was checked for viruses by GFI MailSecurity.
    GFI also develops anti-spam software (GFI MailEssentials), a fax server (GFI FAXmaker), and network security and management software (GFI LANguard) - www.gfi.com

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------

  • Next message: Jim Masson: "RE: Computer accounts in NTFS permissions"

    Relevant Pages

    • Re: Terminal Services - Domain Controller - Normal User
      ... > To log on via terminal Services (administration mode) on a Domain ... > domain controller doesn't have its own groups. ...
      (Focus-Microsoft)
    • Re: Terminal Services 128 day or not?
      ... Terminal Services is used to support normal users. ... by centralizing applications, etc vs desktops. ... Terminal Servies application mode is not for administration which is what ... Microsoft MVP - Terminal Server ...
      (microsoft.public.windows.terminal_services)
    • Re: SBS 2003 and Terminal Services ?
      ... In Windows 2000 Terminal Services, there are 2 different TS modes: ... to access the server remotely. ... Administrators can access a server in Remote Administration mode. ...
      (microsoft.public.windows.terminal_services)
    • Re: IdleWinStationPoolCount
      ... Microsoft MVP - Terminal Services ... learn what is terminal services and how to administer it. ... sessions saved.. ... Services Remote administration mode. ...
      (microsoft.public.windows.terminal_services)
    • Re: SBS 2003 R2 10 User CALs License
      ... Would it possibly help to separate the two ideas into 'Terminal Services' ... In Windows 2000 Server the RD capability was called 'Terminal Services ... Administration Mode' (which sortta confuses my use of TSAM acronym, but hey, ... If you also implement a separate TS, and apply TS licenses to it, those ...
      (microsoft.public.windows.server.sbs)