Solved

Terminal Server - Local Policy - Administrator

Posted on 2006-11-09
4
261 Views
Last Modified: 2010-04-18
Hi!

We have installed Terminal Server on one om my Windows 2003 servers (no DC). I have set up a local policy that prevent users from shutting down the server, accessing the control panel and stuff like that but when I logged on as domain administrator i discovered that the policy was applied to this account as well!!! Is there any way (workaround) to prevent this?

Thnaks
0
Comment
Question by:Caperuzzo
  • 2
4 Comments
 
LVL 38

Expert Comment

by:Shift-3
ID: 17906658
For settings under Administrative Templates, see here:
http://support.microsoft.com/kb/293655

For the shutdown setting you should be able to add specific groups to "Shut down the system" under Computer Configuration\Windows Settings\Security Settings\User Rights Assignment.
0
 

Author Comment

by:Caperuzzo
ID: 17907295
Does the document apply for a windows 2003 TS member of a domain as well?
0
 
LVL 3

Accepted Solution

by:
DaSpug earned 125 total points
ID: 17907958
Yes it will do, if you need the shutdown option back then make sure you add the domain administrators domain group back into the local policy for the "shut down the system" right.

It's in Computer Configuration\Windows Settings\Security Settings\User Rights Assignment\

If anyone else needs to be able to shut down the system (enterprise admins for example) then make sure you add those groups/users as well (groups would be preferred).
0
 
LVL 38

Expert Comment

by:Shift-3
ID: 17914917
Wow.
0

Featured Post

Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Problem pinging RRAS server from outside the network 11 93
Auto-Enrollment Group Policy 2 53
Active Directory not migrating to 2012 DC correctly 35 79
Domain Controller FSMO 7 63
Preface Having the need * to contact many different companies with different infrastructures * do remote maintenance in their network required us to implement a more flexible routing solution. As RAS, PPTP, L2TP and VPN Client connections are no…
by Batuhan Cetin Within the dynamic life of an IT administrator, we hold many information in our minds like user names, passwords, IDs, phone numbers, incomes, service tags, bills and the order from our wives to buy milk when coming back to home.…
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …

791 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question