To make security of 2008 Server same as 2003 server

Posted on 2011-10-05
Medium Priority
Last Modified: 2012-05-12
which are the settings needed to make remote admin equivalent user to do all tasks as local administrator.

like elevating etc...
Question by:sulu999
  • 2
LVL 14

Expert Comment

by:Robin CM
ID: 36916008
Are you sure you want to do that? Really sure?
2008 is more secure by default for a reason...
But sure, turn off the firewall. That's the main difference. Depends what you mean by "remote admin" though, do you mean Remote Desktop Connection onto the server console?
If so you can turn off UAC, and also turn off the requirement for NLA on the remote desktop connection.
If you can clarify then I can tell you how to do it... but I'd really really advise updating your procedures rather than downgrading the server security if at all possible.

Author Comment

ID: 36922235
Yes I mean remote desktop user should be able to execute all tasks as that of local loged in administrator,
also clear me these terms UAC ,NLA ?

after doing the software installation by remote desktop the server will be made secure and it will be on production site.  normal user with admin priviladges should be able to install aplication software .
with out using runas command.

Guru ,now you got clear picture ,
LVL 14

Accepted Solution

Robin CM earned 1000 total points
ID: 36922845
UAC is User Account Control: http://technet.microsoft.com/en-us/library/cc709691(WS.10).aspx
It's what makes everything run with normal user privileges but prompts you when software needs full administrator rights (usually greying the screen).

NLA is Network Level Authentication: http://technet.microsoft.com/en-us/library/cc732713.aspx
It helps ensure that when you make a Remote Desktop Connection you are actually connecting to, and thus providing your username and password to, the computer that you *think* you are.

Obviously your remote deskop user should be a member of the local administrators group too, same as on any version of Windows.

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Scenario:  You do full backups to a internal hard drive in either product (SBS or Server 2008).  All goes well for a very long time.  One day, backups begin to fail with a message that the disk is full.  Your disk contains many, many more backups th…
A procedure for exporting installed hotfix details of remote computers using powershell
This tutorial will walk an individual through the steps necessary to configure their installation of BackupExec 2012 to use network shared disk space. Verify that the path to the shared storage is valid and that data can be written to that location:…
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…
Suggested Courses

840 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question