Re: RRAS Monitor

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 02/08/05 

Date: Tue, 8 Feb 2005 16:13:29 -0600

I hope it is not a domain controller. I don't know if you have tried giving
them membership in the servers group to see if that will work or not. If you
are forced to leave them in administrators group you can "try" to restrict
them to access only certain mmc snapins via Group Policy and configure
auditing for logons, account management, and policy change on the server to
at least track some of what they are doing on the server. If the security
log was cleared when it was not supposed to be you have a definite problem
with a user in the administrators group. -- Steve

"Paul Wicks" <Paul Wicks@discussions.microsoft.com> wrote in message
news:0FA4FDA2-1E35-48FB-8B11-023992A5A52B@microsoft.com...
>I have a modem pool whose connections require monitoring by support staff.
> Currently, I have added the support members to a group that has
> Administrator
> rights, as this seems to be the only way to allow monitoring of RRAS. This
> is
> an undesirable situation as I have some security concerns about one of the
> support members. Is there a way to allow RRAS monitoring without granting
> full administrative priveledges?
>

Relevant Pages

  • Terminal Services-Access Denied to Administrators
    ... The servers are members of different NT 4.0 domains ... cannot access the server even if those accounts are members of the local ... administrators group on the server. ... Add the user to the "Allow logon through Terminal Services" policy. ...
    (microsoft.public.windows.server.general)
  • Terminal Svcs Access denied to administrators- 2nd Posting
    ... The servers are members of different NT 4.0 domains ... cannot access the server even if those accounts are members of the local ... administrators group on the server. ... Add the user to the "Allow logon through Terminal Services" policy. ...
    (microsoft.public.windows.server.general)
  • How to fix this printing problem
    ... I updated all W2K servers and workstations on our network with ... printers installed on the print server. ... Only members of the print ... server's administrators group are able to print. ...
    (microsoft.public.win2000.security)
  • No more printing after applying this months security fixes
    ... I updated all W2K servers and workstations on our network with ... printers installed on the print server. ... Only members of the print ... server's administrators group are able to print. ...
    (microsoft.public.win2000.general)
  • Re: Rid AD of Circular Group Membership
    ... and have use on members if it is used there. ... Administrators group is still intact), nor do they have empowerments over ... Admins is being used for by the 30+ can be delegated I(ex. ... The quess is each has an account and uses it, ...
    (microsoft.public.windows.group_policy)