?
Solved

server 2008 r2 remote desktop users

Posted on 2013-12-23
3
Medium Priority
?
535 Views
Last Modified: 2013-12-29
I have got to audit a server for local group memberships, one thing that stood out was the default "remote users group" had no members? In this case how can admins use mstsc.exe to remote onto the server? Can this type of access be controlled by other means?
0
Comment
Question by:pma111
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
3 Comments
 
LVL 21

Accepted Solution

by:
Boyd (HiTechCoach) Trimmell, Microsoft Access MVP earned 2000 total points
ID: 39735655
What mode is the server running Terminal Services?

 If in administration mode then users in the administrator group  already have remote access privileges. Only members of the administrator group can log on remotely.

If you are running in application mode then you  would assign standard users to "remote users group"  to allow remote log on.
0
 
LVL 3

Author Comment

by:pma111
ID: 39735747
I assume the top option from what you have said but I will check.
0
 
LVL 56

Expert Comment

by:McKnife
ID: 39745482
The mode is not responsible for that behavior.
Please check the following policy: http://technet.microsoft.com/en-us/library/cc758613(v=ws.10).aspx
Allow log on through Terminal Services


Description


This security setting determines which users or groups have permission to log on as a Terminal Services client.

Default:
• On workstation and servers: Administrators, Remote Desktop Users.


• On domain controllers: Administrators.

That's why.
0

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

You might have come across a situation when you have Exchange 2013 server in two different sites (Production and DR). After adding the Database copy in ECP console it displays Database copy status unknown for the DR exchange server. Issue is strange…
Possible fixes for Windows 7 and Windows Server 2008 updating problem. Solutions mentioned are from Microsoft themselves. I started a case with them from our Microsoft Silver Partner option to open a case and get direct support from Microsoft. If s…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…
Suggested Courses
Course of the Month8 days, 17 hours left to enroll

764 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question