TS question
itdaddy
Member Posts: 2,089 ■■■■□□□□□□
Hey TS gurus
I am totally confused about Group Policy settings
okay you knwo the settling in Local Policy where is says
1. allow logon locally
2. allow to logon thru terminal services.
which one denies me logging on to a server vs workstations
I know one of them stops me from remoting into workstations
and one stops me from logging into servers(would this be number1?)
thanks
i have set these before and have completely stop users from logging into their machines
locally which one is it? to me by the name if I add Domain Users group to
the (allow logon locally) this would allow local logns for worksattions but
some how I have allowed domain users to logon to our servers which we do not want
what setting am I missing . I want to have emloyees logon to their own pc and to any domain pc
and I want to block them from logging into servers and but allow admins like me to login to
servers.
it is not that hard but i am just confused.
thanks
and replication mygod takes like 30 minutes holy crap not good for something during the day huh! hahaha
I am totally confused about Group Policy settings
okay you knwo the settling in Local Policy where is says
1. allow logon locally
2. allow to logon thru terminal services.
which one denies me logging on to a server vs workstations
I know one of them stops me from remoting into workstations
and one stops me from logging into servers(would this be number1?)
thanks
i have set these before and have completely stop users from logging into their machines
locally which one is it? to me by the name if I add Domain Users group to
the (allow logon locally) this would allow local logns for worksattions but
some how I have allowed domain users to logon to our servers which we do not want
what setting am I missing . I want to have emloyees logon to their own pc and to any domain pc
and I want to block them from logging into servers and but allow admins like me to login to
servers.
it is not that hard but i am just confused.
thanks
and replication mygod takes like 30 minutes holy crap not good for something during the day huh! hahaha
Comments
-
astorrs
Member Posts: 3,139 ■■■■■■□□□□
Allow log on locally = Allowed to logon to the server at the console
Allow log on through terminal services = Allowed to logon to the server through RDP -
itdaddy
Member Posts: 2,089 ■■■■□□□□□□
thanks but what stops domain users from logging into domain server????
-
Slowhand
Mod Posts: 5,161 Mod
And if there's anyone who knows about the use of force on the network, it's dynamik.
Free Microsoft Training: Microsoft Learn
Free PowerShell Resources: Top PowerShell Blogs
Free DevOps/Azure Resources: Visual Studio Dev Essentials
Let it never be said that I didn't do the very least I could do. -
Slowhand
Mod Posts: 5,161 Mod
You can set who is allowed to log into DCs in the Domain Controllers policy. And for member servers, it's recommended you drop them into a seperate OU from other machines so you can create a suitable policy for them, as well.itdaddy wrote:thanks but what stops domain users from logging into domain server????
I also find threatening them with violent bodily harm does wonders for keeping the users off the servers.
Free Microsoft Training: Microsoft Learn
Free PowerShell Resources: Top PowerShell Blogs
Free DevOps/Azure Resources: Visual Studio Dev Essentials
Let it never be said that I didn't do the very least I could do. -
itdaddy
Member Posts: 2,089 ■■■■□□□□□□
Slowhand
i found what i needed excatly..
Google is ^%####^ aweseome..
http://support.microsoft.com/kb/289289
yeah!
