TS question

itdaddyitdaddy Senior MemberMember Posts: 2,088 ■■■■□□□□□□
Hey TS gurus

I am totally confused about Group Policy settings

okay you knwo the settling in Local Policy where is says

1. allow logon locally
2. allow to logon thru terminal services.


which one denies me logging on to a server vs workstations
I know one of them stops me from remoting into workstations
and one stops me from logging into servers(would this be number1?)

thanks

i have set these before and have completely stop users from logging into their machines
locally which one is it? to me by the name if I add Domain Users group to
the (allow logon locally) this would allow local logns for worksattions but
some how I have allowed domain users to logon to our servers which we do not want
what setting am I missing . I want to have emloyees logon to their own pc and to any domain pc
and I want to block them from logging into servers and but allow admins like me to login to
servers.

it is not that hard but i am just confused.

thanks

and replication mygod takes like 30 minutes holy crap not good for something during the day huh! hahaha

Comments

  • astorrsastorrs Member Posts: 3,139 ■■■■■■□□□□
    Allow log on locally = Allowed to logon to the server at the console

    Allow log on through terminal services = Allowed to logon to the server through RDP
  • dynamikdynamik Banned Posts: 12,314 ■■■■■■■■□□
    itdaddy wrote:
    and replication mygod takes like 30 minutes holy crap not good for something during the day huh! hahaha
    gpupdate /force
    

    If you need it immediately.
  • itdaddyitdaddy Senior Member Member Posts: 2,088 ■■■■□□□□□□
    thanks but what stops domain users from logging into domain server????
  • SlowhandSlowhand MCSE: Cloud Platform and Infrastructure, MCSA: Windows Server 2003/2012/2016, CCNA Routing & Switchi Bay Area, CaliforniaMod Posts: 5,163 Mod
    And if there's anyone who knows about the use of force on the network, it's dynamik. icon_lol.gif

    Free Microsoft Training: Microsoft Learn
    Free PowerShell Resources: Top PowerShell Blogs
    Free DevOps/Azure Resources: Visual Studio Dev Essentials

    Let it never be said that I didn't do the very least I could do.
  • SlowhandSlowhand MCSE: Cloud Platform and Infrastructure, MCSA: Windows Server 2003/2012/2016, CCNA Routing & Switchi Bay Area, CaliforniaMod Posts: 5,163 Mod
    itdaddy wrote:
    thanks but what stops domain users from logging into domain server????
    You can set who is allowed to log into DCs in the Domain Controllers policy. And for member servers, it's recommended you drop them into a seperate OU from other machines so you can create a suitable policy for them, as well.

    I also find threatening them with violent bodily harm does wonders for keeping the users off the servers.

    Free Microsoft Training: Microsoft Learn
    Free PowerShell Resources: Top PowerShell Blogs
    Free DevOps/Azure Resources: Visual Studio Dev Essentials

    Let it never be said that I didn't do the very least I could do.
  • itdaddyitdaddy Senior Member Member Posts: 2,088 ■■■■□□□□□□
    Slowhand

    i found what i needed excatly..

    Google is ^%####^ aweseome..

    http://support.microsoft.com/kb/289289

    yeah!
Sign In or Register to comment.