Solved

2k8 term server RESET PASSWORD remotely

Posted on 2014-09-22
2
288 Views
Last Modified: 2014-09-22
Where in GPO do I control non-admins to have the option to reset their password when they select Ctrl+Alt+End when connected to terminal server?

I have the option to reset my password (Admin) non-admins do not. Assume this is controlled in GRO

Thanks
0
Comment
Question by:sparkis
2 Comments
 
LVL 2

Accepted Solution

by:
Livin Jose earned 500 total points
ID: 40336498
Hi,

I am not pretty sure about the settings in Terminal server. But in normal scenario you can control the permission of users to change the password by editing below GPO.

1. Click the Group Policy object (GPO) that you want to work with, and then click Edit.
2. Expand the GPO->expand User Configuration->expand Administrative Templates-> and then expand System.
3. Click Ctrl+Alt+Del Options.
4. Here you can find the GPO 'Remove Change Password'. If this policy is enabled users won't be able to
change the password.
5. Disable the policy and see if this helps you.
0
 

Author Comment

by:sparkis
ID: 40336510
Thanks that worked -

I changed Comp->Policies->AdminTemp->WinComponents->RemoteDesktopServices->RemoteDestktopSessionHost->RemoteSessionEnv->RemoveWindowsSecurityItemfromStartMenu "Disabled"

"Specifies whether to remove the Windows Security item from the Settings menu on Remote Desktop clients. You can use this setting to prevent inexperienced users from logging off from Remote Desktop Services inadvertently.

If the status is set to Enabled, Windows Security does not appear in Settings on the Start menu. As a result, users must type a security attention sequence, such as CTRL+ALT+END, to open the Windows Security dialog box on the client computer.

If the status is set to Disabled or Not Configured, Windows Security remains in the Settings menu."
0

Featured Post

Announcing the Most Valuable Experts of 2016

MVEs are more concerned with the satisfaction of those they help than with the considerable points they can earn. They are the types of people you feel privileged to call colleagues. Join us in honoring this amazing group of Experts.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
Is your Office 365 signature not working the way you want it to? Are signature updates taking up too much of your time? Let's run through the most common problems that an IT administrator can encounter when dealing with Office 365 email signatures.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

816 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now