Terminal services question

You are the network administrator for your company. The network consists of a single Active Directory domain and functional level of the domain is Windows Server 2003.
You install Terminal Services on all domain controllers. However, your technical support specialists report that they cannot use Terminal Services to access any domain controllers.
Which action or actions should you perform to solve this problem? (Choose all that apply)

A. Install Remote Desktop for Administration.
B. Require the support specialists to use a console session to connect to the terminal servers.
C. Add the Remote Administrators group to the Account Operators group.
D. Add the support specialists to the Remote Desktop Users group.
E. Modify the Default Domain Controller GPO to grant the Log on locally user right to the support specialists.

Given answers are D and E. You can discount B and C right away. Isnt E an overkill? Please help.

Find more posts tagged with

SAVE $250 on Your Microsoft Boot Camp — Use Code "EXAM26"

Exclusively for TechExams members for Infosec Boot Camps starting before April 30, 2026

View Microsoft Boot Camps

Comments

astorrs

No because they won't have the right to log on locally to DCs.

Essendon

astorrs wrote:

No because they won't have the right to log on locally to DCs.

Yeah, but when you edit the GPO to allow local access, isnt that too much access? Anyways, what do you think are the right choices.

astorrs

A remote desktop logon is interactive and therefore a local logon. D & E are my choices as well.

Essendon

Awright, got what you were trying to say. What's wrong with A?

Terminal Services is probably my weakest point for this exam. Trying to brush up as much as I can on this topic. Hope I dont get more than a few from this section.

astorrs

"You install Terminal Services on all domain controllers."

Because the full version is already installed on the server.

royal

It is too much access but it will work and are the correct choices vs the other options. Typically, you would add them to the Remote Desktop Users group and them grant that group access to allow them to logon through terminal services. By default, on a DC, only Administrators are granted this right while on member/standalone servers, both Remote Desktop Users and Administrators are granted this right

Essendon

Thank you for the super quick replies, gents. Much appreciated.

astorrs

Yeah you have to be careful, often the "correct" answer on the practice (and real!) exams is not always the "best practice" answer. You have to pick the one(s) that is the best of the available answers - you just may want to implement it differently down the road, but that's what all the studying was for.

Daniel333

Terminal services is kind of weird. Although I did get a big kick out of running Office 2007 on my 400mhz Linux box, mapped right to my home folder too.

Make sure you set up a Vmware on this and practice. Sharing sessions, setting timeouts, killing hung apps, hooking up legacy, Mac and Linux clients, setting default starting programs, printing and so on.

They say you can get Windows 3.1 to work with TS, but I have not been able to get 3.11 to run in Virtual PC.

Biggest problem is all the texts mention that you need to know these features, but don't go into detail. But if you play with them for an afternoon you should be able to figure them out.

astorrs

Let us know any terminal services questions you guys have (I've been working with it since TSE). Like Daniel suggested throw up a VM of a W2k3 server, install terminal services and use your local computer to RDP to it.

You can get WFW 3.11 and later to work with plain old TS. Everything else (Linux, Mac, etc) is not supported natively by Microsoft so I wouldn't worry about them right now (but of course people have written RDP clients for them).

Essendon

Thank you for all the advice. Let's see how I go on the test!