Solved

server 2008 r2 remote desktop users

Posted on 2013-12-23
3
479 Views
Last Modified: 2013-12-29
I have got to audit a server for local group memberships, one thing that stood out was the default "remote users group" had no members? In this case how can admins use mstsc.exe to remote onto the server? Can this type of access be controlled by other means?
0
Comment
Question by:pma111
3 Comments
 
LVL 21

Accepted Solution

by:
Boyd (HiTechCoach) Trimmell, Microsoft Access MVP earned 500 total points
ID: 39735655
What mode is the server running Terminal Services?

 If in administration mode then users in the administrator group  already have remote access privileges. Only members of the administrator group can log on remotely.

If you are running in application mode then you  would assign standard users to "remote users group"  to allow remote log on.
0
 
LVL 3

Author Comment

by:pma111
ID: 39735747
I assume the top option from what you have said but I will check.
0
 
LVL 54

Expert Comment

by:McKnife
ID: 39745482
The mode is not responsible for that behavior.
Please check the following policy: http://technet.microsoft.com/en-us/library/cc758613(v=ws.10).aspx
Allow log on through Terminal Services


Description


This security setting determines which users or groups have permission to log on as a Terminal Services client.

Default:
• On workstation and servers: Administrators, Remote Desktop Users.


• On domain controllers: Administrators.

That's why.
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Recently, I read that Microsoft has analysed statistics for their security intelligence report. It revealed: still, the clear majority of windows users do their daily work as administrator. An administrative account is a burden, security-wise. My ar…
Possible fixes for Windows 7 and Windows Server 2008 updating problem. Solutions mentioned are from Microsoft themselves. I started a case with them from our Microsoft Silver Partner option to open a case and get direct support from Microsoft. If s…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

777 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question