RE: Terminal Services - Domain Controller - Normal User

From: Michael Scheidell (scheidell_at_secnap.net)
Date: 02/25/05 

Date: Fri, 25 Feb 2005 15:28:14 -0500
To: "Robert Abela" <robert@gfi.com>, <focus-ms@securityfocus.com>

Yes, promote them to domain administrators.

 

> -----Original Message-----
> From: Robert Abela [mailto:robert@gfi.com]
> Sent: Friday, February 25, 2005 3:07 AM
> To: focus-ms@securityfocus.com
> Subject: Terminal Services - Domain Controller - Normal User
>
> HI,
>
> To log on via terminal Services (administration mode) on a
> Domain controller one needs to be an Administrator of the
> domain (like a member of the enterprise administrators, or
> domain administrators etc), since a domain controller doesn't
> have its own groups.
>
> Are there any particular permissions or way to set it up to
> give a normal user logon access (via terminal services,
> administration mode) to the domain controller?
>
> Kind regards,
>
> Robert Abela - GFI Software Ltd. - www.gfi.com Messaging,
> Content Security & Network Security Software
> GFI: MailSecurity - FAXmaker - MailEssentials - LANguard
>
>
>
>
> This mail was checked for viruses by GFI MailSecurity.
> GFI also develops anti-spam software (GFI MailEssentials), a
> fax server (GFI FAXmaker), and network security and
> management software (GFI LANguard) - www.gfi.com
>
>
> --------------------------------------------------------------
> -------------
> --------------------------------------------------------------
> -------------
>
>
>

---------------------------------------------------------------------------
---------------------------------------------------------------------------

Relevant Pages

  • Re: Encountered errors while running Exmerge. Please Help!
    ... There is no local administrators group on a domain controller. ... Send AS and Receive As right to the group over the Exchange store object ...
    (microsoft.public.exchange.admin)
  • Re: Terminal Services (Administration mode) Security
    ... the child domain is half way around the world :-) Second issue is just like ... capability when I added the group to the administrators of the local machine ... Do that in Local Security Policy for a domain member and you would ... > domain controller you may want to put in a child OU to the domain ...
    (microsoft.public.win2000.security)
  • Re: administrator unable to logon interactively
    ... All domain clients and workstations run the Windows XP ... domain controller and the secondary domain controller. ... >> administrators group including the administrator can ...
    (microsoft.public.win2000.security)
  • Re: Terminal Services (Administration mode) Security
    ... users local administrators to allow then to logon locally and that could ... Do that in Local Security Policy for a domain member and you ... >> domain controller you may want to put in a child OU to the domain ...
    (microsoft.public.win2000.security)
  • RE: Terminal Services - Domain Controller - Normal User
    ... Terminal Services - Domain Controller - Normal User ... promote them to domain administrators. ... > This mail was checked for viruses by GFI MailSecurity. ...
    (Focus-Microsoft)