If you get Stu's W2K news email newsletter he just sent one out this morning that had a snippet from Mark Minasi explaining how to do this very thing.  Here's the quote from Mark Minasi:

How to let Non-Domain Admins connect to a Win2K Server via Terminal Services in Remote Admin mode? Here's what Mark Minasi found out:

I really like Terminal Services for Windows 2000 in the "Remote Administration" mode; it lets up to two people use Terminal Services to remotely control a Windows 2000 Server, and doesn't require me to buy any Terminal Server client licenses. But when you select "Remote Administration" mode for Terminal Services, then Terminal Services only lets members of the Domain Admins group log into Terminal Services.

I wanted to let regular old users log in, but didn't know how. While teaching a class for a large communications company this month, I found out how.

Open Terminal Services Configuration (it's in Administrative Tools)
In the command pane (the left-hand pane of the MMC console), click on "Connections."
In the right-hand pane, you'll see an icon representing a connection (a hard disk atop a network connection) and the words "RDP-Tcp," "tcp," and "Microsoft RDP 5.0." Double-click the icon to bring up its Properties dialog, or just right-click the icon and choose "Properties." You'll see a property page labeled "RDP-Tcp Properties."
Click the "Permissions" tab.
Note that right now, the tab shows only the System account and the local Administrators group. Add any person or group that you like, and they'll be able to log onto the server via Terminal Services.



At 11:45 AM 8/17/2001 -0400, you wrote:
  Sorry for not mentioning this the first time, but Terminal Services is in Admin Mode. In order to accomplish this before, I had to give others Admin rights. Now I don't have to, I can just give them through policies what they need to do.

Thanks.
Terry Caleb

---------- Original Message ----------------------------------
From: "Kevin Miller" <[EMAIL PROTECTED]>
Reply-To: "NT System Admin Issues" <[EMAIL PROTECTED]>
Date: Fri, 17 Aug 2001 11:34:25 -0700

>Checking.... I have a locked down Demo account with no rights logining
>into a remote mode TS? I think anyone can login as long as they have the
>check box done.. 
>
>Or am I just smoking crack?
>
>Kevinm QWSZC, VRY+Y, NFH, SAD-VF, DERSDESDFG
>~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
>More letters after my name makes me Smarter.
>~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
>please respond back to rent this ad space for your needs
>
>
>-----Original Message-----
>From: Kevin Lundy [mailto:[EMAIL PROTECTED]]
>Sent: Friday, August 17, 2001 8:31 AM
>To: NT System Admin Issues
>Subject: RE: Access to Terminal Server
>
>
>I think the issue may be in how Terry originally installed TS - in
>remote admin mode maybe instead of application server?  If remote admin
>mode, I don't think there is any way around the admin permissions -
>that's one of MS's way of ensuring you don't bypass proper licensing.
>
>-----Original Message-----
>From: Kevin Miller [mailto:[EMAIL PROTECTED]]
>Sent: Friday, August 17, 2001 2:28 PM
>To: NT System Admin Issues
>Subject: RE: Access to Terminal Server
>
>
>Just give the user logon to TS rights in there AD profile.
>
>Kevinm QWSZC, VRY+Y, NFH, SAD-VF, DERSDESDFG
>~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
>More letters after my name makes me Smarter.
>~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
>please respond back to rent this ad space for your needs
>
>
>-----Original Message-----
>From: Terry [mailto:[EMAIL PROTECTED]]
>Sent: Friday, August 17, 2001 8:16 AM
>To: NT System Admin Issues
>Subject: Access to Terminal Server
>
>
>  I am not at a location now that permits me to look back into the past
>posts, so I am sorry if this has come up recently. I need to be able to
>give access to a server through Terminal Services, WITHOUT giving
>administrator rights to that account.
>  Anyone done this?
>
>TIA
>Terry Caleb
>
>http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
>
>
>http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
>
>http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
>
>
>http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
>
>

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

Reply via email to