TS question

itdaddy

Hey TS gurus

I am totally confused about Group Policy settings

okay you knwo the settling in Local Policy where is says

1. allow logon locally
2. allow to logon thru terminal services.


which one denies me logging on to a server vs workstations
I know one of them stops me from remoting into workstations
and one stops me from logging into servers(would this be number1?)

thanks

i have set these before and have completely stop users from logging into their machines
locally which one is it? to me by the name if I add Domain Users group to
the (allow logon locally) this would allow local logns for worksattions but
some how I have allowed domain users to logon to our servers which we do not want
what setting am I missing . I want to have emloyees logon to their own pc and to any domain pc
and I want to block them from logging into servers and but allow admins like me to login to
servers.

it is not that hard but i am just confused.

thanks

and replication mygod takes like 30 minutes holy crap not good for something during the day huh! hahaha

astorrs

Allow log on locally = Allowed to logon to the server at the console

Allow log on through terminal services = Allowed to logon to the server through RDP

dynamik

itdaddy wrote:

and replication mygod takes like 30 minutes holy crap not good for something during the day huh! hahaha

gpupdate /force

If you need it immediately.

itdaddy

thanks but what stops domain users from logging into domain server????

Slowhand

And if there's anyone who knows about the use of force on the network, it's dynamik.

Slowhand

itdaddy wrote:

thanks but what stops domain users from logging into domain server????

You can set who is allowed to log into DCs in the Domain Controllers policy. And for member servers, it's recommended you drop them into a seperate OU from other machines so you can create a suitable policy for them, as well.

I also find threatening them with violent bodily harm does wonders for keeping the users off the servers.

itdaddy

Slowhand

i found what i needed excatly..

Google is ^%####^ aweseome..

http://support.microsoft.com/kb/289289

yeah!