Solved

Terminal Server - Local Policy - Administrator

Posted on 2006-11-09
4
259 Views
Last Modified: 2010-04-18
Hi!

We have installed Terminal Server on one om my Windows 2003 servers (no DC). I have set up a local policy that prevent users from shutting down the server, accessing the control panel and stuff like that but when I logged on as domain administrator i discovered that the policy was applied to this account as well!!! Is there any way (workaround) to prevent this?

Thnaks
0
Comment
Question by:Caperuzzo
  • 2
4 Comments
 
LVL 38

Expert Comment

by:Shift-3
ID: 17906658
For settings under Administrative Templates, see here:
http://support.microsoft.com/kb/293655

For the shutdown setting you should be able to add specific groups to "Shut down the system" under Computer Configuration\Windows Settings\Security Settings\User Rights Assignment.
0
 

Author Comment

by:Caperuzzo
ID: 17907295
Does the document apply for a windows 2003 TS member of a domain as well?
0
 
LVL 3

Accepted Solution

by:
DaSpug earned 125 total points
ID: 17907958
Yes it will do, if you need the shutdown option back then make sure you add the domain administrators domain group back into the local policy for the "shut down the system" right.

It's in Computer Configuration\Windows Settings\Security Settings\User Rights Assignment\

If anyone else needs to be able to shut down the system (enterprise admins for example) then make sure you add those groups/users as well (groups would be preferred).
0
 
LVL 38

Expert Comment

by:Shift-3
ID: 17914917
Wow.
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Numerous times I have been asked this questions that what is it that makes my machine log on so slow, there have been cases where computers took 23 minute exactly after taking password and getting to the desktop. Interesting thing was the fact th…
I've always wanted to allow a user to have a printer no matter where they login. The steps below will show you how to achieve just that. In this Article I'll show how to deploy printers automatically with group policy and then using security fil…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
With the power of JIRA, there's an unlimited number of ways you can customize it, use it and benefit from it. With that in mind, there's bound to be things that I wasn't able to cover in this course. With this summary we'll look at some places to go…

912 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now