Announcement

Collapse
No announcement yet.

How to admin from Remote Desktop connection

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • How to admin from Remote Desktop connection

    Hello Everyone.

    How do I restrict the administrators account from being able to access the server through Remote Desktop Connection.

    Basically, I want the administrators account to be able to access the server only locally?

    Thanks

  • #2
    Re: How to admin from Remote Desktop connection

    Originally posted by HotDay2222 View Post
    Hello Everyone.

    How do I restrict the administrators account from being able to access the server through Remote Desktop Connection.

    Basically, I want the administrators account to be able to access the server only locally?

    Thanks
    Turn off RDP.

    Comment


    • #3
      Re: How to admin from Remote Desktop connection

      wullieb1,
      doesn't that also turn off remote desktop connection for everyone?

      What i meant was...I want every other use to be able to use remote desktop connection, but not administrator.

      thanks

      Comment


      • #4
        Re: How to admin from Remote Desktop connection

        In the local computer policy of the server, deny those users (Administrators?) the right to log on through Terminal Services.

        But being Administrators, I think they will be able to reset that right and allow themselves back in.

        If someone is an Administrator, he has a lot of power, so why not make these (untrustworthy) people members of other groups to give them just the rights they need and no more?
        Best wishes,
        PaulH.
        MCP:Server 2003; MCITP:Server 2008; MCTS: SBS2008

        Comment


        • #5
          Re: How to admin from Remote Desktop connection

          Its not about trust, its about security.
          I'm the administrator, however i think it would be safer if the server can be accesses only physically and not remotely.

          where under group policy is this option?

          thanks

          Comment


          • #6
            Re: How to admin from Remote Desktop connection

            Never mind, found where it is.
            Run gpedit.msc
            Computer Configurations/Windows Settings/Security Settings/Local Policies/User Rights Assignments

            and look for 'Allow log on through Terminal Services'


            wow....it feels nice answering your own post <cough>

            Comment


            • #7
              Re: How to admin from Remote Desktop connection

              Originally posted by HotDay2222 View Post
              wullieb1,
              doesn't that also turn off remote desktop connection for everyone?

              What i meant was...I want every other use to be able to use remote desktop connection, but not administrator.

              thanks
              To catch up with this post.

              Yes it does turn off RDP for everyone. You never actualkly mention in your post that there were users connecting to TS.

              Doesn't unchecking this box deny the administrator logon rights via TS
              Attached Files

              Comment


              • #8
                Re: How to admin from Remote Desktop connection

                Didn't know that dialog box (the picture) existed.
                How do I get that to show up?

                Comment


                • #9
                  Re: How to admin from Remote Desktop connection

                  Originally posted by HotDay2222 View Post
                  Didn't know that dialog box (the picture) existed.
                  How do I get that to show up?
                  Active Directory Users and Computers

                  Comment


                  • #10
                    Re: How to admin from Remote Desktop connection

                    I'm set us as workgroup, not domain.
                    Would I still get that dialog box?

                    Comment


                    • #11
                      Re: How to admin from Remote Desktop connection

                      Originally posted by HotDay2222 View Post
                      I'm set us as workgroup, not domain.
                      Would I still get that dialog box?
                      Nope.

                      Why have a server in a workgroup scenario???

                      Comment


                      • #12
                        Re: How to admin from Remote Desktop connection

                        Originally posted by wullieb1 View Post
                        Nope.

                        Why have a server in a workgroup scenario???
                        Well, as you can tell:
                        1) I don't know much about networking, so I don't have the slightest idea on how to even get started.
                        2) Workgroup seems easier.
                        3) THere is about only 5 clients...not too many. So, its easier (for me) to manage.
                        4) I read that if I made it domain, it would place greater load on the server because it has to also to do some stuff with internet and IPs, etc...stuff I don't understand.
                        5) don't mess with something thats working

                        Comment


                        • #13
                          Re: How to admin from Remote Desktop connection

                          Originally posted by HotDay2222 View Post
                          Well, as you can tell:
                          1) I don't know much about networking, so I don't have the slightest idea on how to even get started.
                          2) Workgroup seems easier.
                          3) THere is about only 5 clients...not too many. So, its easier (for me) to manage.
                          4) I read that if I made it domain, it would place greater load on the server because it has to also to do some stuff with internet and IPs, etc...stuff I don't understand.
                          5) don't mess with something thats working
                          1) Your in the right place for help.
                          2) When it starts getting larger it won't be.
                          3) Think of it this way. You have 5 PC's and a server ATM. Your user changes there password on 1 machine. You then MUST change that password on each other machine. In a domain sceenario, user changes password on server, you do nothing. What's easier now??
                          4) It will place a little more load on the server but not that much. Do you have internet now??? IP's you are already using. Ask questions or search google for the answers.
                          5) Yes its working but not optimally. You are in effect creating work for yourself leaving it in a workgroup and not having a domian.

                          Comment


                          • #14
                            Re: How to admin from Remote Desktop connection

                            Restricting the administrator from logging on through RDC, IMO, is not going to make the server more secure.

                            PS - totally agree with Wullie.
                            Regards,
                            Jeremy

                            Network Consultant/Engineer
                            Baltimore - Washington area and beyond
                            www.gma-cpa.com

                            Comment


                            • #15
                              Re: How to admin from Remote Desktop connection

                              Originally posted by wullieb1 View Post
                              1) Your in the right place for help.
                              2) When it starts getting larger it won't be.
                              3) Think of it this way. You have 5 PC's and a server ATM. Your user changes there password on 1 machine. You then MUST change that password on each other machine. In a domain sceenario, user changes password on server, you do nothing. What's easier now??
                              4) It will place a little more load on the server but not that much. Do you have internet now??? IP's you are already using. Ask questions or search google for the answers.
                              5) Yes its working but not optimally. You are in effect creating work for yourself leaving it in a workgroup and not having a domian.
                              Man, are you a lawyer? Almost have me convinced.

                              However, from all the above points (4) is most important. I need the server to be as fast as possible because it is being accessed not only within the LAN but also from the outside via 'Remote Desktop Connection'.

                              Will the server acting as Primary Domain controller be placed under more stress for the 'Remote Desktop' users to notice a performance difference???

                              Comment

                              Working...
                              X