Hi,

That's right, but what was most surprising in my test is why would it be
necessary for the admin group not to be denied access for regular user to
log in ?
It was pretty odd : if I deny access to the admin group, when I try to log
on wint TS client, the logon window is not "pre opened", it waits for
ctrl-alt-del which I can, of course, not press !

Marc Neiger
Groupe Synergie Informatique
14 rue Saint Papoul
31000 Toulouse
Tel 05 34 41 38 38 Fax: 05 34 41 38 39


> -----Original Message-----
> From: Andrew Baker [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, August 29, 2001 4:51 PM
> To: NT System Admin Issues
> Subject: RE: Denying TS Access to admin
> 
> 
> No.
> 
> Deny ACLs override everything else.
> 
>  
> - ASB
>  
> 
> 
> -----Original Message-----
> From: Ryan McBride [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, August 29, 2001 9:54 AM
> To: NT System Admin Issues
> Subject: RE: Denying TS Access to admin
> 
> 
> Just curious, wouldnt the Domain Admin group override it???
> 
> -----Original Message-----
> From: Ralph Davis [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, 29 August 2001 10:43 PM
> To: NT System Admin Issues
> Subject: Re:Denying TS Access to admin
> 
> 
> If I was going to try something like this I would create a 
> group and put all
> the
> domain admins in it and then deny this group the right to 
> access the TS from
> the
> network.
> 
> ralph
> 
> ____________________Reply Separator____________________
> Subject:    Denying TS Access to admin
> Author: NT System Admin Issues <[EMAIL PROTECTED]>
> Date:       08/29/2001 1:50 AM
> 
> Hi,
> 
> Under W2K Server; does anybody have some smart idea about how to deny
> Terminal Services access to administrators while allowing 
> regular users ?
> 
> If I somehow deny access to the administrator group, I end up 
> with access
> being denied to all or even the TS logon process impossible 
> through some
> secondary effect.
> I want to be sure that whatever happens the Admin logs on the physical
> console
> 
> thanks in advance,
> Marc Neiger
> 
> 
> http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
> 
> 


http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

Reply via email to