Re: prevent remote desktop connections
From: Steven Umbach (n9rou_at_n0spam-comcast.net)
Date: 02/24/05
- Next message: Steven Umbach: "Re: Single Sign-on authentication using Smart Cards"
- Previous message: Steven Umbach: "Re: NT profile corrupt, now EFS files lost?"
- In reply to: Fabrussio: "prevent remote desktop connections"
- Next in thread: andy smart: "Re: prevent remote desktop connections"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Wed, 23 Feb 2005 23:06:38 -0600
If they are gaining control of other workstations then you have a problem with
user group membership or passwords. You can use Domain Security Policy to
enforce that users use passwords, enforce the complexity, and maximum password
age. Other option are to disable file and print sharing on student computers or
change the user right for access this computer from the network to be only
domain admins for these computer. That can be done via Group Policy for specific
groups of computers such as those in an OU. Ipsec filtering policy can also be
configured via Group Policy to prevent student computers from accessing each
other but still allow access to domain controllers and authorized computers that
they need to access. The link below explains ipsec filtering more. --- Steve
http://www.securityfocus.com/infocus/1559
"Fabrussio" <Fabrussio@discussions.microsoft.com> wrote in message
news:B7B221EF-556A-4B80-940A-56DB36E4709C@microsoft.com...
> win2000 network
>
> students are bringing in remote desktop software on disk and then gaining
> control of other win2000 workstations. Is there not a simple setting in local
> security or GPO or something that prevents all remote desktop connections?
>
> please don't answer with 'use only allowed windows apps' in a GPO, as this
> is not an option.
- Next message: Steven Umbach: "Re: Single Sign-on authentication using Smart Cards"
- Previous message: Steven Umbach: "Re: NT profile corrupt, now EFS files lost?"
- In reply to: Fabrussio: "prevent remote desktop connections"
- Next in thread: andy smart: "Re: prevent remote desktop connections"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
