I haven't tried it yet, but I would like to avoid redefining an already
existing group.....
Marc Neiger
Groupe Synergie Informatique
> -----Original Message-----
> From: Michael Reid [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, August 29, 2001 9:42 PM
> To: NT System Admin Issues
> Subject: Re: Denying TS Access to admin
>
>
> Could you add all the names of the administrators you don't
> want to have
> access to it in a group and then deny the group access?
>
> Michael
>
>
> ----- Original Message -----
> From: "Marc Neiger" <[EMAIL PROTECTED]>
> To: "NT System Admin Issues" <[EMAIL PROTECTED]>
> Sent: Wednesday, August 29, 2001 7:57 AM
> Subject: RE: Denying TS Access to admin
>
>
> > Hi,
> >
> > It seems like my question raised more issues than answers :-)
> >
> > The TS is going to be in a DMZ and accessible somehow from
> the internet.
> For
> > security, I'd like to restrict access so that it can not be
> administered
> if
> > you do not have physical access, and so, I want to deny TS access to
> > administrators. Maybe someone can come up with a better principle ?
> >
> > As for what I tried, it is fairly simple, I tried fiddling with the
> > permission tab in the RDP connexion, trying to deny access
> to admin "total
> > control" or also trying individual rights in the advanced
> pane. Maybe I
> > wasn't able to find the proper combination.
> >
> > Thanks,
> > Marc Neiger
> >
> > Groupe Synergie Informatique
> >
> > > -----Original Message-----
> > > From: Kent Spencer [mailto:[EMAIL PROTECTED]]
> > > Sent: Wednesday, August 29, 2001 12:36 PM
> > > To: NT System Admin Issues
> > > Subject: Re: Denying TS Access to admin
> > >
> > >
> > > .. how did you disable the Administrator group to make it break?
> > >
> > > --- Marc Neiger <[EMAIL PROTECTED]> wrote:
> > > Hi,
> > >
> > > Under W2K Server; does anybody have some smart idea about
> how to deny
> > > Terminal Services access to administrators while allowing regular
> > > users ?
> > >
> > > If I somehow deny access to the administrator group, I end up with
> > > access being denied to all or even the TS logon process impossible
> > > through some secondary effect.
> > >
> > > I want to be sure that whatever happens the Admin logs on
> the physical
> > > console
> > >
> > > thanks in advance,
> > > Marc Neiger
> > >
> > >
> > > __________________________________________________
> > > Do You Yahoo!?
> > > Make international calls for as low as $.04/minute with
> > > Yahoo! Messenger
> > > http://phonecard.yahoo.com/
> > >
> > > http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
> > >
> > >
> >
> >
> > http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
> >
> >
>
>
> http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
>
>
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
