Solved

Restrict remote Desktop Users (Terminal Services)

Posted on 2009-05-19
3
465 Views
Last Modified: 2013-11-21
I realized today that after securing the GPO for our Terminal Servers to the likes of removing network neighborhood, removing right clicking on the taskbar, no run command, removing access to regedit/control panel/admin tools that those changes applied to the local user as well.

Whats the best way to secure terminal servers from the remote desktop users stance?

(just had a thought) Could I set the Security Filtering in the GPO's Scope to "remote desktop users"?  Would that cause the GPO to not affect local users (i.e. VNC, physical console)?
0
Comment
Question by:Ben Hart
  • 2
3 Comments
 
LVL 5

Expert Comment

by:Christophermagee
ID: 24427468
You can block terminal services from the user prroperties in Active directory terminal services profile tab however i think you would need to tick it for everyone.

Or there is this   http://technet.microsoft.com/en-us/library/cc737453(WS.10).aspx

Hope this helps
0
 
LVL 14

Author Comment

by:Ben Hart
ID: 24427497
Close, but these are actually Terminal Servers.. used by my users.  I'm just wanting to restrict what trouble they can get into once logged in.    but specifically I guess I'm wondering about setting the filtering on the GPO to Remote Desktop Users versus Authenticated Users.
0
 
LVL 14

Accepted Solution

by:
Ben Hart earned 0 total points
ID: 24427667
I figured it out.. You must set the target security group (the ones whom you wan the gpo to affect) with read and apply group policy permissions.  then you can add other security groups but check Deny apply group policy that way members of that group can login but they will not be affected by the GPO's changes.

woot
0

Featured Post

IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

A quick step-by-step overview of installing and configuring Carbonite Server Backup.
Know what services you can and cannot, should and should not combine on your server.
Excel styles will make formatting consistent and let you apply and change formatting faster. In this tutorial, you'll learn how to use Excel's built-in styles, how to modify styles, and how to create your own. You'll also learn how to use your custo…
This video explains how to create simple products associated to Magento configurable product and offers fast way of their generation with Store Manager for Magento tool.

705 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now