Improve company productivity with a Business Account.Sign Up

x
?
Solved

Terminal Server - Local Policy - Administrator

Posted on 2006-11-09
4
Medium Priority
?
270 Views
Last Modified: 2010-04-18
Hi!

We have installed Terminal Server on one om my Windows 2003 servers (no DC). I have set up a local policy that prevent users from shutting down the server, accessing the control panel and stuff like that but when I logged on as domain administrator i discovered that the policy was applied to this account as well!!! Is there any way (workaround) to prevent this?

Thnaks
0
Comment
Question by:Caperuzzo
  • 2
4 Comments
 
LVL 38

Expert Comment

by:Shift-3
ID: 17906658
For settings under Administrative Templates, see here:
http://support.microsoft.com/kb/293655

For the shutdown setting you should be able to add specific groups to "Shut down the system" under Computer Configuration\Windows Settings\Security Settings\User Rights Assignment.
0
 

Author Comment

by:Caperuzzo
ID: 17907295
Does the document apply for a windows 2003 TS member of a domain as well?
0
 
LVL 3

Accepted Solution

by:
DaSpug earned 375 total points
ID: 17907958
Yes it will do, if you need the shutdown option back then make sure you add the domain administrators domain group back into the local policy for the "shut down the system" right.

It's in Computer Configuration\Windows Settings\Security Settings\User Rights Assignment\

If anyone else needs to be able to shut down the system (enterprise admins for example) then make sure you add those groups/users as well (groups would be preferred).
0
 
LVL 38

Expert Comment

by:Shift-3
ID: 17914917
Wow.
0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This article provides a convenient collection of links to Microsoft provided Security Patches for operating systems that have reached their End of Life support cycle. Included operating systems covered by this article are Windows XP,  Windows Server…
Watch the video to know how one can repair corrupt Exchange OST file effortlessly and convert OST emails to MS Outlook PST file format by using Kernel for OST to PST converter tool. It can convert OST to MSG, MBOX, EML to access them. It can migrate…
Watch the video of Kernel Migrator for SharePoint, which demonstrate the process easily of migration from SharePoint to SharePoint, OneDrive for Business & Google Drive servers, Public Folder to SharePoint, File Server to SharePoint. The tool has va…

579 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question