Re: Remote Access to Services

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 11/08/03


Date: Sat, 8 Nov 2003 14:03:47 -0700

They can only do that if they have administrative
privs on your machine. Control what is in your
Administrators group as a start, and going further
control what accounts are granted the user rights
Log on over the network and Log on locally .

-- 
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4)  MCDBA
"Allen Read" <anonymous@discussions.microsoft.com> wrote in message
news:0e5201c3a493$d335ebe0$a601280a@phx.gbl...
> How do I restrict another user from accessing my
> services.  Currently if someone on our network opens
> their services then then selects to connect to my
> computer, they can access my services and turn different
> ones on and off.


Relevant Pages

  • Re: Delegation - Password Reset - Access Denied
    ... Control Wizard from the MS TechNet web site. ... Yet a user in that group gets and error when trying to reset a password. ... BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx ... Administrators Group defeat the purpose of using Deligation? ...
    (microsoft.public.windows.server.active_directory)
  • Re: restricting user
    ... There are a user rights that control logon, ... and/or accounts granted that user right. ... domain to allow only users to login which i wants. ...
    (microsoft.public.windows.server.security)
  • Re: Why does not permit logon interactively?
    ... The builtin administrators group of domain b does not include the administrator from domain a. ... Check out "Planning your access control strategy for multiple domains" and "Best practices for controlling access to shared resources across domains" ... I am using Administrator account go logon. ... User Rights Assignment "Allow logon locally" ...
    (microsoft.public.windows.server.active_directory)
  • Re: Allowing local administration
    ... Adding yourself to the administrators group simply gives you full control ... If you want full control over all machines you should add yourself ... Add this script as a *startup* script to a GPO and link the GPO to the ...
    (microsoft.public.windows.server.active_directory)
  • Re: Has any way to change all the domain users have the right to install the software on local compu
    ... Administrators group, but you can't use it to make a specific person a ... member of the Local Administators group on their computer only. ... What happens afterwards is out of your control. ... The problem is that the ability to install software requires full control ...
    (microsoft.public.windows.server.general)