To make security of 2008 Server same as 2003 server

Posted on 2011-10-05
Last Modified: 2012-05-12
which are the settings needed to make remote admin equivalent user to do all tasks as local administrator.

like elevating etc...
Question by:sulu999
    LVL 14

    Expert Comment

    Are you sure you want to do that? Really sure?
    2008 is more secure by default for a reason...
    But sure, turn off the firewall. That's the main difference. Depends what you mean by "remote admin" though, do you mean Remote Desktop Connection onto the server console?
    If so you can turn off UAC, and also turn off the requirement for NLA on the remote desktop connection.
    If you can clarify then I can tell you how to do it... but I'd really really advise updating your procedures rather than downgrading the server security if at all possible.

    Author Comment

    Yes I mean remote desktop user should be able to execute all tasks as that of local loged in administrator,
    also clear me these terms UAC ,NLA ?

    after doing the software installation by remote desktop the server will be made secure and it will be on production site.  normal user with admin priviladges should be able to install aplication software .
    with out using runas command.

    Guru ,now you got clear picture ,
    LVL 14

    Accepted Solution

    UAC is User Account Control:
    It's what makes everything run with normal user privileges but prompts you when software needs full administrator rights (usually greying the screen).

    NLA is Network Level Authentication:
    It helps ensure that when you make a Remote Desktop Connection you are actually connecting to, and thus providing your username and password to, the computer that you *think* you are.

    Obviously your remote deskop user should be a member of the local administrators group too, same as on any version of Windows.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Want to promote your upcoming event?

    Are you going to an event? Are you going to be exhibiting at a tradeshow? Talking at a conference? Using a promotional banner in your email signature ensures that your organization’s most important contacts stay in the know and can potentially spread the word about the event.

    To effectively work with Diskpart on a Server Core, it is necessary to write some small batch script's, because you can't execute diskpart in a remote powershell session. To get startet, place the Diskpart batch script's into a share on your loca…
    Redirected folders in a windows domain can be quite useful for a number of reasons, one of them being that with redirected application data, you can give users more seamless experience when logging into different workstations.  For example, if a use…
    This tutorial will give a short introduction and overview of Backup Exec 2012 and how to navigate and perform basic functions. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as conne…
    This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…

    759 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    11 Experts available now in Live!

    Get 1:1 Help Now