Solved

Deny All And Grant Authorization As Needed To Terminal Services Users Without Active Directory

Posted on 2007-03-27
5
230 Views
Last Modified: 2013-12-04
Greetings;

I'm running Windows 2003 Server Standard edition in a workgroup (Active Directory is not installed). I run a software development business and occassionally hire contractors. I need to secure my server such that the contractors only have authorization to what they need.

Ideally, I would like to default to be that contractors have no access other than to login in via terminal services and get to their respective My Documents directory. I would grant access to programs and directories on an as needed basis. This would include Control Panel programs as well (I do not want contractors having access to Administrative Tools).

Is there a straight forward way to accomplish what I'm looking for?


Much thanks ... David
0
Comment
Question by:David Bach
  • 3
5 Comments
 
LVL 48

Expert Comment

by:Jay_Jay70
ID: 18804270
Veriman,

your life would be considerably easier with AD.....

Regards,

James
0
 
LVL 13

Accepted Solution

by:
Kini pradeep earned 250 total points
ID: 18806001
The thing with local policies is that you cannot filter it out to not apply to particular users, example Administrators. however like everything else there is a way out.
normally if you enable the settings in local policy (gpedit.msc console) they apply to administrators as well. you could enble the policies and on C;\windows\system32\group ppolicy folder you can deny permissions for the adminsitrator so that the administrator does not read the templates and the policy does not apply. at this point the administrator would not be able to access the gp object editor..it would give an "access denied" . if the admin wants to then make changes he would have to give permissions to the administrators on the folder and can edit the policies.
I have tried it and it works, but trust me using AD would make it far more easier.
let me know if you need anything else.
0
 
LVL 48

Assisted Solution

by:Jay_Jay70
Jay_Jay70 earned 250 total points
ID: 18806036
well there is one way around it that isnt pretty but it works :)

http://support.microsoft.com/kb/293655/
0
 

Author Comment

by:David Bach
ID: 18808669
Thank you Jay and kprad.

I have not experienced success with installing, tailoring and customizing Active Directory on Windows 2003 Server.

I will need to try it again.

David
0
 
LVL 48

Expert Comment

by:Jay_Jay70
ID: 18812975
AD is very nice once you step back and look at what you actually want and need - then your life gets much much better
0

Featured Post

Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

This is a guide to the following problem (not exclusive but here) on Windows: Users need our support and we supporters often use global administrative accounts to do this. Using these accounts safely is a real challenge. Any admin who takes se…
SHARE your personal details only on a NEED to basis. Take CHARGE and SECURE your IDENTITY. How do I then PROTECT myself and stay in charge of my own Personal details (and) - MY own WAY...
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…
Finds all prime numbers in a range requested and places them in a public primes() array. I've demostrated a template size of 30 (2 * 3 * 5) but larger templates can be built such 210  (2 * 3 * 5 * 7) or 2310  (2 * 3 * 5 * 7 * 11). The larger templa…

831 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question