Windows Server 2000/2003 Thread, Deny users /admin option in RDP in Technical; Hi
We have a couple of RDP servers to allow pupils to connect to the school network. The problem is ...
5th March 2013, 10:53 AM #1
- Rep Power
Deny users /admin option in RDP
We have a couple of RDP servers to allow pupils to connect to the school network. The problem is one or two of them are adding the /admin switch to their command. Now whilst it would be great to just say "Don't do that" it will never work.
Has anybody got any idea how I can say "if user is in group "pupils" and session="console" then delete?"
I have had a look at - Re: Disable the console RDP session in Server 2003 but they seem to have a problem running it as a batch.
How do others stop users logging in with the /admin or /console switch?
5th March 2013, 11:04 AM #2
Yep, you need to remove the Allow Logon Locally right from those users using either the local security policy on those servers or through group policy - Computer config | Policies | Windows Settings | Security Settings | Local Policies | User Rights Assignment | Allow log on locally
5th March 2013, 11:13 AM #3
- Rep Power
Thanks for that, have set that up now.
By Liam in forum How do you do....it?
Last Post: 24th October 2007, 12:49 PM
By wesleyw in forum Virtual Learning Platforms
Last Post: 21st September 2007, 02:34 PM
By MrDylan in forum ICT KS3 SATS Tests
Last Post: 25th April 2006, 12:09 PM
By tosca925 in forum Educational Software
Last Post: 3rd January 2006, 03:41 PM
Users Browsing this Thread
There are currently 1 users browsing this thread. (0 members and 1 guests)