Solved

Deny All And Grant Authorization As Needed To Terminal Services Users Without Active Directory

Posted on 2007-03-27
5
231 Views
Last Modified: 2013-12-04
Greetings;

I'm running Windows 2003 Server Standard edition in a workgroup (Active Directory is not installed). I run a software development business and occassionally hire contractors. I need to secure my server such that the contractors only have authorization to what they need.

Ideally, I would like to default to be that contractors have no access other than to login in via terminal services and get to their respective My Documents directory. I would grant access to programs and directories on an as needed basis. This would include Control Panel programs as well (I do not want contractors having access to Administrative Tools).

Is there a straight forward way to accomplish what I'm looking for?


Much thanks ... David
0
Comment
Question by:David Bach
  • 3
5 Comments
 
LVL 48

Expert Comment

by:Jay_Jay70
ID: 18804270
Veriman,

your life would be considerably easier with AD.....

Regards,

James
0
 
LVL 13

Accepted Solution

by:
Kini pradeep earned 250 total points
ID: 18806001
The thing with local policies is that you cannot filter it out to not apply to particular users, example Administrators. however like everything else there is a way out.
normally if you enable the settings in local policy (gpedit.msc console) they apply to administrators as well. you could enble the policies and on C;\windows\system32\group ppolicy folder you can deny permissions for the adminsitrator so that the administrator does not read the templates and the policy does not apply. at this point the administrator would not be able to access the gp object editor..it would give an "access denied" . if the admin wants to then make changes he would have to give permissions to the administrators on the folder and can edit the policies.
I have tried it and it works, but trust me using AD would make it far more easier.
let me know if you need anything else.
0
 
LVL 48

Assisted Solution

by:Jay_Jay70
Jay_Jay70 earned 250 total points
ID: 18806036
well there is one way around it that isnt pretty but it works :)

http://support.microsoft.com/kb/293655/
0
 

Author Comment

by:David Bach
ID: 18808669
Thank you Jay and kprad.

I have not experienced success with installing, tailoring and customizing Active Directory on Windows 2003 Server.

I will need to try it again.

David
0
 
LVL 48

Expert Comment

by:Jay_Jay70
ID: 18812975
AD is very nice once you step back and look at what you actually want and need - then your life gets much much better
0

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Remote Apps is a feature in server 2008 which allows users to run applications off Remote Desktop Servers without having to log into them to run the applications.  The user can either have a desktop shortcut installed or go through the web portal to…
Container Orchestration platforms empower organizations to scale their apps at an exceptional rate. This is the reason numerous innovation-driven companies are moving apps to an appropriated datacenter wide platform that empowers them to scale at a …
I've attached the XLSM Excel spreadsheet I used in the video and also text files containing the macros used below. https://filedb.experts-exchange.com/incoming/2017/03_w12/1151775/Permutations.txt https://filedb.experts-exchange.com/incoming/201…

856 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question