?
Solved

Lock terminal server without using Group Policy

Posted on 2011-10-13
9
Medium Priority
?
272 Views
Last Modified: 2012-05-12
Hi

I have a Windows Server Std 2008 R2, not joined into a domain
How can I restrict users rights, but without using Group Policy?

I need, for example, disable control panel, network browsing, executing programs...

Thank you
0
Comment
Question by:ServiceAdvisory
9 Comments
 
LVL 13

Expert Comment

by:Govvy
ID: 36963003
Use local Group Policy - Administrative Tools>Group Policy Management
0
 

Author Comment

by:ServiceAdvisory
ID: 36963026
Do you mean adding to the server the Feature "Group Policy Management", and use them as Domain GP?
0
 
LVL 13

Expert Comment

by:Govvy
ID: 36963036
Yes
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 
LVL 13

Expert Comment

by:Govvy
ID: 36963050
Actually check if it is already installed named "Local Security Policy"
0
 

Author Comment

by:ServiceAdvisory
ID: 36963087
Ah
I already have Local Security Policy, BUT in there I cannot find something useful, like in Domain GP
They are different things

Are you sure you can do the same things fron Local Security Policy?
0
 
LVL 13

Expert Comment

by:Govvy
ID: 36963258
Most of the GPO's will just be registry settings i.e. http://www.pctools.com/guides/registry/detail/153/
0
 
LVL 37

Accepted Solution

by:
Neil Russell earned 400 total points
ID: 36963263
0
 
LVL 11

Expert Comment

by:Ackles
ID: 36965277
Please see below the Technet version:
http://technet.microsoft.com/en-us/library/cc725970.aspx

Now, the general problem in local policy is granularity, so get to the specific level, like say if you want to achieve different policies for different users & separate computer policies, this is the way to go:
Open mmc from run command
then you add in it :
1) Local Group Policy Editor

Now when you add this, it will ask you for whom you want this console to be?
At this point you can specify that it's for computer or user. The good thing is you can add all at once & save to your desktop.
This way you can add it for all the different users if you want to configure different rights for them or otherwise whatever suits your need.

Please let know your thoughts?

A
0
 

Author Comment

by:ServiceAdvisory
ID: 36967046
thx to Neilsr
I found what I was looking for
0

Featured Post

Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Possible fixes for Windows 7 and Windows Server 2008 updating problem. Solutions mentioned are from Microsoft themselves. I started a case with them from our Microsoft Silver Partner option to open a case and get direct support from Microsoft. If s…
This article explains how to install and use the NTBackup utility that comes with Windows Server.
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Suggested Courses

830 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question