Re: Windows2003\LimitingUserAccess\TS

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 01/06/05

  • Next message: Steven L Umbach: "Re: Securing with Group Policy" 
    Date: Wed, 5 Jan 2005 21:58:28 -0600

    You might look into another way for the user to access the server such as a
    mapped drive either on the lan or over a VPN connection. Otherwise you will
    have to use ntfs permissions and Group Policy to restrict the user. Group
    Policy can be configured locally via gpedit.msc or better yet at the domain
    or OU level for domain computers. The problem with local Group Policy is
    that by default it applies to ALL users that logon to the computer, though
    there are a couple hacks to work around that. For Group Policy in particular
    look at settings for restrictions under user configuration/administrative
    templates - various categories. For ntfs permissions add the user to a group
    with deny permissions or add the user to deny permissions for folders/drives
    you do not want him to access OR remove everyone/users from ntfs permissions
    [leave administrators/system], assuming no other regular users need access,
    for drives and folders you do not want him to access starting at the parent
    folder where you want to restrict access. You would then want to check all
    folders under the parent folder to see if any have explicit [non inherited]
    permissions that need to be modified. Do NOT assign deny permissions to
    users however as admins are in the users group. --- Steve

    "Jeff" <jbarr62307@worldnet.att.net> wrote in message
    news:OwZkBP48EHA.1300@TK2MSFTNGP14.phx.gbl...
    >I am allowing a user onto my Windows 2003 server, using Terminal Services.
    >All I want the user to be able to do is get to his directory on the F drive
    >and be able to add\remove subfolders and files. I assigned him to the
    >folder and assigned him as a remote operator, but he has access to control
    >panel and all the drives and folders. How do I accomplish this?
    >
    > TIA
    >

  • Next message: Steven L Umbach: "Re: Securing with Group Policy"

    Relevant Pages

    • Re: Personal Media Drive
      ... > much more knowledgeable about Windows than I am. ... You restrict access by assigning permissions to drives, folders and files. ...
      (microsoft.public.windows.mediacenter)
    • Re: Missing Administrative Tools Option?
      ... You restrict access by assigning permissions to drives, folders and files. ... How Do I Get the Security Tab in Properties - XP Home ...
      (microsoft.public.windowsxp.security_admin)
    • Re: active directory
      ... > and stores it on shared folders (or mapped drives) on the server. ... > What we want to develop is an intranet web site that acts as a friendly ... > drives they have access to) based on the user permissions. ...
      (microsoft.public.inetserver.asp.components)
    • Re: Setting user access permissions
      ... You restrict access by assigning permissions to drives, folders and files. ... Disable Simplified Sharing and Password-Protect a Shared Folder in Windows XP ...
      (microsoft.public.windowsxp.security_admin)
    • Re: Windows2003LimitingUserAccessTS
      ... with the user accessing the server through an internet ... > have to use ntfs permissions and Group Policy to restrict the user. ... >>panel and all the drives and folders. ...
      (microsoft.public.win2000.security)