Restrict user to Terminal Server login only

Hi all,

I have two servers an SBS2003 and a Terminal Server.

I have setup 1 user account called "desktop" that all users use to login to on their local PCs, from here they launch a remote desktop connection to the terminal server where they use their normal logins ie: "bob.smith"

What I need to do is stop users from login into the local desktops with their normal user logins eg: I dont want them to login to the local PC as "bob.smith" instead of "desktop".

Is there anyway to restrict user accounts to only be able to login via Terminal Server and not to a local PC?
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Hi OnemindIT

You can do this using AD. Under the properties for a user select Account, then click on Log On To and then you can restrict the user to only be able to logon to your Terminal server by selecting "The Following Computers" and then entering the name of your terminal server.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
OnemindITAuthor Commented:
Thanks, works perfectly.
OnemindITAuthor Commented:
Just as a follow up question, is it posbile to have this settings as part of a user template when I crate an account?

I have a bunch of user templates setup and I tried modifying this setting in the template but it doesn't apply to the user account that is created from the template.
Big Business Goals? Which KPIs Will Help You

The most successful MSPs rely on metrics – known as key performance indicators (KPIs) – for making informed decisions that help their businesses thrive, rather than just survive. This eBook provides an overview of the most important KPIs used by top MSPs.

How do you create your templates. I.E. I just have a disabled user account which I have setup properly and then just copy it to create new users. Doing it that way does preserve the Log On To settings. How are you doing your templates?
OnemindITAuthor Commented:
I used the "Server Management" console that comes with SBS2003 to create the templates (which as you said just creates a disabled user in the AD), then I went into the "template" and changed the logon setting.

What I do when I create a new user though is I again use the "Server Management" console and select "Add User" a wizard pops up and one of the options is a list of "templates" to use, I select one and it creates the user.

I tried it your way by copying the disabled user to create a new user and yes the setting sticks... it must be a problem with how the add user wizard uses the template to create the user (it might only take certain settings from it).
Yeah not sure on that. Dont actually use SBS so dont have any experience with its wizards. May be an option for you to just use "Active Directory Users and Computers" and copy the disabled user to do it rather then wizard.
OnemindITAuthor Commented:
Yeh ill do that, got no problem with AD just have to enter less details in the wizard and it lets you do multiple users at the same time with a nice interface.

OnemindITAuthor Commented:
I have added a related question to this one (see "Related Solution" under the original question).
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft Server OS

From novice to tech pro — start learning today.