Re: Disable "Allow logon to terminal server"

From: Steven L Umbach (n9rou_at_n0-spam-for-me-comcast.net)
Date: 10/20/04 

Date: Wed, 20 Oct 2004 14:03:33 GMT

You could remote in via TS to manage those accounts or use security policy
to manage the user right for "logon locally" which a user will need to
access a TS in W2K. In Windows 2003 that has been changed to a separate user
right called "allow logon through Terminal Services". That can be configured
through Local Security Policy or you can put the computer in an
Organizational Unit with it's own GPO with the logon locally configured to
your needs. User rights are accessible through computer
configuration/Windows settings/security settings/local policies/user rights.
That will not directly configure the user's local account but they can not
logon without the logon locally user right. -- Steve

"Jason Cook" <JasonCook@discussions.microsoft.com> wrote in message
news:1518C02B-BBCA-4C9C-B5AE-1E35C9B4FA99@microsoft.com...
> Is there a way to remotely manage (script, GPO, etc) the local account
> property, "Allow logon to terminal server" for local accounts on Windows
> 2000
> servers? The domain is also Windows 2000.

Relevant Pages

  • Re: C# servicecontroller permissions
    ... remote machine. ... The ASP.Net account on *YOUR* machine is an admin because ... a domain account or a local account that exists on both machines). ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Iusr_Servername NetworkPrinter
    ... the printer is actually shared on a remote machine? ... IUSR_is a local account. ... the "port" to use a network port. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Finding a Hacker
    ... Something CREATED this account so likely the hacker has some ... Why is psAnywhere on this machine if you have Remote Desktop enabled? ... "userHacker" account. ... I'm assuming the account was a local account on the ...
    (microsoft.public.windows.server.active_directory)
  • Re: Account Policies - NT
    ... Security Policy account policy will propagated to domain computers as ... > the local account policies on NT member servers? ...
    (microsoft.public.windows.server.security)
  • Re: Using RWW with Vista Client
    ... Only if you plan to authenticate with that local account. ... Since you've allowed "any version of Remote Desktop", ... I try to use RWW to connect to the Vista client, ...
    (microsoft.public.windows.server.sbs)