Remote Desktop Users and Least User Rights

We have undertaken a project to switch all of our users to standard user
accounts (no administrative rights on the local machine). We have many
users that are setup so that they can access their computers from home.
We've noticed that when the user is removed from the Administrators
group, the list of authorized remote users (My Computer > Properties >
Remote tab > Select Remote Users) gets wiped out. An administrator then
has to log on to the machine and add the user back to the list.

I can see why this would happen, but it does present something of a
problem for us. I would prefer not to have to manually fix this problem on
hundreds of machines. Is there a way that we can retain the list of
authorized remote users when we remove the employees administrative
rights on the machine? Also, is there some way--perhaps a script--that
we can identify the machines were remote users have been setup?

--Tom


.

Relevant Pages

  • Re: Remote Desktop Users and Least User Rights
    ... the Administrators group, the list of authorized remote users (My Computer ... Remote tab> Select Remote Users) gets wiped out. ... or you could create a simple startup script assigned via GPO to add them. ... You can create/link a new GPO at the appropriate OU where your computers ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Password required for sharing printer across network??
    ... Do I also need to give users on those other PC's rights to certain ... suspected their remote users need to have write privelages to wherever ... if I make set the users from those other PC's as Administrators ... > Windows Printing Team ...
    (microsoft.public.win2000.printing)
  • Remote Desktop Users and Least User Rights
    ... accounts (no administrative rights on the local machine). ... users that are setup so that they can access their computers from home. ... We've noticed that when the user is removed from the Administrators ... Remote tab> Select Remote Users) gets wiped out. ...
    (microsoft.public.windowsxp.general)
  • IE Hangs for non-Admin users
    ... 5000+ Windows XP Service Pack 1 desktops. ... Our Helpdesk reports that by far the biggest call they are getting is to do ... - The problem does not happen on all computers and can't easily be replicated ... - The problem does not occur with users in the Administrators group ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: Rights Issues (i think) with domain pcs
    ... Quickbooks is the same and requires admin privileges on the local ... eh admin group on the local computers. ... I inherited this network also other wise i would have set up ... >> You probably know that a member of the domain administrators grp by ...
    (microsoft.public.windows.server.general)