Solved

Remote Desktop Services In Windows Server 2012 for external users.

Posted on 2014-09-14
9
322 Views
Last Modified: 2014-09-22
I need users to be able to RDP into the server 2012 and use sage, however I don't want them to see the standard user profile for the administrator. It needs to be locked down for that user.

Any help would be greatly appreciated.
0
Comment
Question by:Geektank
  • 5
  • 3
9 Comments
 
LVL 90

Expert Comment

by:John Hurst
Comment Utility
I think it should be much the same as Server 2008. They make an RDP session to the server and log in with their own user name (not administrator). Then they make the connection to Sage.

They may be able to see there is a profile for administrator (anyone can do that on any computer) but they will get "access denied" if they try to access.
0
 

Author Comment

by:Geektank
Comment Utility
Yes I already understand this... however I need to remove the administration profile for that user, as so the server represents a basic user profile. I imagine this can be done with the user permissions.
0
 
LVL 90

Expert Comment

by:John Hurst
Comment Utility
I do not understand what you are trying to do. The user will have their own user name that has nothing to do with administrator. So you do not need to remove the administrator profile (and in fact, you probably cannot remove the administrator profile).

What am I missing in your case?
0
 

Author Comment

by:Geektank
Comment Utility
I need the users to view the remote connection as a basic profile eg. standard windows 8 pc with out all the administration tools.
It's really needs to be locked down for the users.
0
Do You Know the 4 Main Threat Actor Types?

Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

 
LVL 90

Accepted Solution

by:
John Hurst earned 250 total points
Comment Utility
Then remove the administrative tools from the user profile. I did not think admin tools showed up in a standard profile.

Have you made these users members of the administrators group?  It appears you have and then admins can do anything and you cannot lock them down.

Make the users Standard Users  on the Server and on the Windows 8 PC and they should not see admin tools and profiles.
0
 

Author Comment

by:Geektank
Comment Utility
I'll give it ago John and check back soon. Thanks John
0
 
LVL 2

Assisted Solution

by:Azurael
Azurael earned 250 total points
Comment Utility
Are you familliar with RemoteApp?

This should allow you to run the Sage exe directly via RDP, without actually opening a full RDP session.
This should be much easier than setting up user-specific permissions on your server, and is a bit lighter on network resources.

Article below
http://social.technet.microsoft.com/wiki/contents/articles/10817.publishing-remoteapps-in-windows-server-2012.aspx
0
 
LVL 90

Expert Comment

by:John Hurst
Comment Utility
Be sure to continue to check what authorities users have as admin stuff does not show up for Standard Users. So even if the above works for you, the users should still be constrained.
0
 
LVL 90

Expert Comment

by:John Hurst
Comment Utility
@Geektank  - Thank you and I was happy to help.
0

Featured Post

Free book by J.Peter Bruzzese, Microsoft MVP

Are you using Office 365? Trying to set up email signatures but you’re struggling with transport rules and connectors? Let renowned Microsoft MVP J.Peter Bruzzese show you how in this exclusive e-book on Office 365 email signatures. Better yet, it’s free!

Join & Write a Comment

This article will review the basic installation and configuration for Windows Software Update Services (WSUS) in a Windows 2012 R2 environment.  WSUS is a Microsoft tool that allows administrators to manage and control updates to be approved and ins…
Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
In this Micro Tutorial viewers will learn how to restore their server from Bare Metal Backup image created with Windows Server Backup feature. As an example Windows 2012R2 is used.
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now