Solved

Restrict user to Terminal Server console session

Posted on 2007-04-10
4
2,185 Views
Last Modified: 2013-11-21
Hi,

I am setting up a server that will be running a SCADA system (Wonderware) and will be running Terminal Services on Windows Server 2003.  There are 2 logging programs that need to run at system startup so I have enabled the automatic logon option for a user (eg:wonderadmin) and placed the shortcuts in their startup directory.  Users can then connect in using their credentials in Terminal Services  to run the Wonderware front-end program.  

I will be needing to remotely access the console session that is automatically logged on at startup for administrative purposes.  I know I can connect into the session using "mstsc /console" but I would like to be refused connection if I don't use the "/console" switch.  Is there any way to do this?  

Thanks.
0
Comment
Question by:Feedler
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
4 Comments
 
LVL 48

Accepted Solution

by:
Jay_Jay70 earned 500 total points
ID: 18895971
nope, Term serv will let you in by default, i dont beleive you can block and allow cosole sessios like that
0
 

Author Comment

by:Feedler
ID: 18917909
Thought that was the case.

Thanks.
0
 

Expert Comment

by:iso_more
ID: 24337141
The solution is incorrect.

1. Open the Terminal Services Configuration snap-in.
2. View the Properties of RDP-Tcp and select the Permissions tab.
3. Add the Everyone group and change the Guest Access from allow to deny.

Tags: restrict RDP console terminal services remote desktop
0
 

Expert Comment

by:GENINZ
ID: 34097476
Found this on another forum:

TS has a WMI provider which allows you to do that. The easier way to access WMI provider functionality is with WMIC alias. If you want to deny administrators access to console, you can run the following within a cmd shell:
WMIC RDAccount where "TerminalName='console' and AccountName like '%administrators%'" call delete

If you want to restore the default permissions setting for console:
WMIC RDPermissions where "TerminalName='console'" call RestoreDefaults

More info:
http://blogs.msdn.com/ts/archive/2006/10/03/Terminal-Services-_2800_TS_2900_-Remote-Configuration-Primer-Part-1.aspx
0

Featured Post

Simplifying Server Workload Migrations

This use case outlines the migration challenges that organizations face and how the Acronis AnyData Engine supports physical-to-physical (P2P), physical-to-virtual (P2V), virtual to physical (V2P), and cross-virtual (V2V) migration scenarios to address these challenges.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

On a regular basis I get questions about slow RDP performance, RDP connection problems, strange errors and even BSOD, remote computers freezing or restarting after initiation of a remote session. In a lot of this cases the quick solutions made b…
Welcome to my series of short tips on migrations. Whilst based on Microsoft migrations the same principles can be applied to any type of migration. My first tip Migration Tip #1 – Source Server Health can be found listed in my profile here: http:…
Do you want to know how to make a graph with Microsoft Access? First, create a query with the data for the chart. Then make a blank form and add a chart control. This video also shows how to change what data is displayed on the graph as well as form…
In this video you will find out how to export Office 365 mailboxes using the built in eDiscovery tool. Bear in mind that although this method might be useful in some cases, using PST files as Office 365 backup is troublesome in a long run (more on t…

624 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question