Re: prevent remote desktop connections

From: Miha Pihler [MVP] (mihap-news_at_atlantis.si)
Date: 02/24/05

  • Next message: Silly: "Re: how to hide Security tab for windows 2000 workstation" 
    Date: Thu, 24 Feb 2005 00:07:35 +0100

    I am not sure if I understand you question and for a complete answer I could
    use some more information.

    Would you like to completely disable access to terminal services or would
    you like to enable them just for few users?

    If you would like to enable this only for few users (administrators), you
    could create a group and add this group to "Allow logon locally" to GPO for
    the server or on Windows XP and Windows 2003 server add this group to "Allow
    access through Terminal Services". Any users that would not be member of
    groups added to such policy would not be allowed to logon to server using
    Terminal Service... 

    -- 
Mike
Microsoft MVP - Windows Security
"Fabrussio" <Fabrussio@discussions.microsoft.com> wrote in message 
news:B7B221EF-556A-4B80-940A-56DB36E4709C@microsoft.com...
> win2000 network
>
> students are bringing in remote desktop software on disk and then gaining
> control of other win2000 workstations. Is there not a simple setting in 
> local
> security or GPO or something that prevents all remote desktop connections?
>
> please don't answer with 'use only allowed windows apps' in a GPO, as this
> is not an option.
  • Next message: Silly: "Re: how to hide Security tab for windows 2000 workstation"

    Relevant Pages

    • Re: GPO error no appropriate rights
      ... Microsoft CSS Online Newsgroup Support ... GPO error no appropriate rights ... >> Windows XP SP2 via GPO to verify your configuration: ... Install the Windows Small Business Server 2003 Update for Windows ...
      (microsoft.public.windows.server.sbs)
    • Re: GPO error no appropriate rights
      ... > message when you try to edit a GPO while logged on as the system admin. ... Install the Windows Small Business Server 2003 Update for Windows XP ... > from disabling the ISA Firewall client. ...
      (microsoft.public.windows.server.sbs)
    • Re: Disabling ICF through GPO
      ... I first pre-created a "Firewall GPO" on the server then I just opened ... MMC on an XP-SP2 machine and used it's MMC to edit the GPO I had created on ... "Deploying Windows Firewall Settings for Microsoft Windows XP with Service ...
      (microsoft.public.windows.group_policy)
    • Re: Time Server [WildPacket]
      ... > Applied a GPO to a test server running 2003 Server and one client ... > Enable Windows NTP Client: ...
      (microsoft.public.windows.server.active_directory)
    • Re: RE: How to chnage registry by a GPO
      ... For Windows 2003 Server, in a GPO, ... Manage Your Server page at logon. ... >>>> I currently run a script to create/modify a registry ...
      (microsoft.public.win2000.group_policy)