Solved

server 2008 r2 remote desktop users

Posted on 2013-12-23
3
491 Views
Last Modified: 2013-12-29
I have got to audit a server for local group memberships, one thing that stood out was the default "remote users group" had no members? In this case how can admins use mstsc.exe to remote onto the server? Can this type of access be controlled by other means?
0
Comment
Question by:pma111
3 Comments
 
LVL 21

Accepted Solution

by:
Boyd (HiTechCoach) Trimmell, Microsoft Access MVP earned 500 total points
ID: 39735655
What mode is the server running Terminal Services?

 If in administration mode then users in the administrator group  already have remote access privileges. Only members of the administrator group can log on remotely.

If you are running in application mode then you  would assign standard users to "remote users group"  to allow remote log on.
0
 
LVL 3

Author Comment

by:pma111
ID: 39735747
I assume the top option from what you have said but I will check.
0
 
LVL 54

Expert Comment

by:McKnife
ID: 39745482
The mode is not responsible for that behavior.
Please check the following policy: http://technet.microsoft.com/en-us/library/cc758613(v=ws.10).aspx
Allow log on through Terminal Services


Description


This security setting determines which users or groups have permission to log on as a Terminal Services client.

Default:
• On workstation and servers: Administrators, Remote Desktop Users.


• On domain controllers: Administrators.

That's why.
0

Featured Post

Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Learn about cloud computing and its benefits for small business owners.
While rebooting windows server 2003 server , it's showing "active directory rebuilding indices please wait" at startup. It took a little while for this process to complete and once we logged on not all the services were started so another reboot is …
This tutorial will give a short introduction and overview of Backup Exec 2012 and how to navigate and perform basic functions. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as conne…
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…

696 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question