Could you add all the names of the administrators you don't want to have
access to it in a group and then deny the group access?
Michael
----- Original Message -----
From: "Marc Neiger" <[EMAIL PROTECTED]>
To: "NT System Admin Issues" <[EMAIL PROTECTED]>
Sent: Wednesday, August 29, 2001 7:57 AM
Subject: RE: Denying TS Access to admin
> Hi,
>
> It seems like my question raised more issues than answers :-)
>
> The TS is going to be in a DMZ and accessible somehow from the internet.
For
> security, I'd like to restrict access so that it can not be administered
if
> you do not have physical access, and so, I want to deny TS access to
> administrators. Maybe someone can come up with a better principle ?
>
> As for what I tried, it is fairly simple, I tried fiddling with the
> permission tab in the RDP connexion, trying to deny access to admin "total
> control" or also trying individual rights in the advanced pane. Maybe I
> wasn't able to find the proper combination.
>
> Thanks,
> Marc Neiger
>
> Groupe Synergie Informatique
>
> > -----Original Message-----
> > From: Kent Spencer [mailto:[EMAIL PROTECTED]]
> > Sent: Wednesday, August 29, 2001 12:36 PM
> > To: NT System Admin Issues
> > Subject: Re: Denying TS Access to admin
> >
> >
> > .. how did you disable the Administrator group to make it break?
> >
> > --- Marc Neiger <[EMAIL PROTECTED]> wrote:
> > Hi,
> >
> > Under W2K Server; does anybody have some smart idea about how to deny
> > Terminal Services access to administrators while allowing regular
> > users ?
> >
> > If I somehow deny access to the administrator group, I end up with
> > access being denied to all or even the TS logon process impossible
> > through some secondary effect.
> >
> > I want to be sure that whatever happens the Admin logs on the physical
> > console
> >
> > thanks in advance,
> > Marc Neiger
> >
> >
> > __________________________________________________
> > Do You Yahoo!?
> > Make international calls for as low as $.04/minute with
> > Yahoo! Messenger
> > http://phonecard.yahoo.com/
> >
> > http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
> >
> >
>
>
> http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
>
>
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
