Announcement

Collapse
No announcement yet.

Prevent admin from viewing terminal session GPO or REG?

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Prevent admin from viewing terminal session GPO or REG?

    Hello,

    I am company that I moonlight for is starting a merger that is likely to get ugly. The current "administrator" likes to log on to the terminal server and watch other peoples sessions. None of the users care for this so I would like to set a registry setting or GPO in a manner that this guy can't do that anymore.

    I know that there is a setting per user profile that requires permission to interact with the terminal session but that can just be turned off.

    The guy will be getting let go in the near future but in the mean time is there something I can do about this? It is a touchy situation so I can't just go changing admin passwords and locking him out yet.

    Does anybody know of a way that I could adjust a registry setting or set a GPO for this, then change the permissions so that the administrator account can't reverse it?

    Thanks

  • #2
    Re: Prevent admin from viewing terminal session GPO or REG?

    Moved to TS Forum so Yuval has a better chance of seeing the post.
    1 1 was a racehorse.
    2 2 was 1 2.
    1 1 1 1 race 1 day,
    2 2 1 1 2

    Comment


    • #3
      Re: Prevent admin from viewing terminal session GPO or REG?

      You can use GPO (from OU/Domain) for example:

      http://www.virtualizationadmin.com/a...up-policy.html

      http://blogs.technet.com/b/perfguru/...rver-2008.aspx

      But the local admin may try to block it... and I dont know why he need a local admin permission as all..
      Last edited by yuval14; 16th June 2011, 13:04.
      Best Regards,

      Yuval Sinay

      LinkedIn: https://www.linkedin.com/in/yuval14, Blog: http://blogs.microsoft.co.il/blogs/yuval14

      Comment

      Working...
      X