Setting permissions on a group

I have users logging into a terminal server, we are using our file/print server, just so they can test whether or not terminal services is going to work for us. I do not want these users to be able to access active directory, system files, etc. I have created a group, terminalclients, added the terminal users to it, set permissions to logon locally, given this group permission in Terminal Connections. I would like to restrict this group. How do I do this?

Thanks,
Diane
dboyle53169Asked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

20LILY00Commented:
This is not a fast solution. I would have recomended finding another box for testing any resonible computer will work for testing. You will have to create policies to restrict access. I dont usually do testing on a production box.
JConchieCommented:
not clear what you mean by "restrict this group"  It will only have access to those resources to which you grant it...at whatever level of access you specify.......can you clarify?
dboyle53169Author Commented:
Right now he is able to go into active directory and delete a user. He is also able to go into the system files. I want to restrict him from access these and other area's of my server. I'm not sure how to do this. 20LILY00 mentioned policies, is this the recommended way of restricting users while on a terminal server?  If so, please tell me how to set this up, if not please tell me the correct way.

Thanks,
Diane
The 7 Worst Nightmares of a Sysadmin

Fear not! To defend your business’ IT systems we’re going to shine a light on the seven most sinister terrors that haunt sysadmins. That way you can be sure there’s nothing in your stack waiting to go bump in the night.

JConchieCommented:
He can only delete AD users if he has Domain Admin, or Account admin rights....make sure those users are not in those groups......

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
wtrmk74Commented:
JConchie is correct...  :)

the Users are in Groups , so the restrictions are what groups are the users assigned to?

that will ultimately fix your problem...

hope that helps
JConchieCommented:
"JConchie is correct...  "  Nice quote, I think it says it all
JConchieCommented:
"JConchie is correct...  "  Nice quote, I think it says it all!!
wtrmk74Commented:
I figured you would like that one!

~:)
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows 2000

From novice to tech pro — start learning today.