OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Bryan Allerdice (bryan_allerdiceyahoo.com)
Date: Mon Jan 21 2002 - 11:29:34 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    I know that, but let's say I don't want all the administrators to have
    Terminal Services access. If I use the ADDUSERS tool to add new admin users,
    they will all have TS access by default. That is why I am interested in
    learning why/how TS access is given by default.

    BRYAN

    > -----Original Message-----
    > From: Sandro Sousa [mailto:sandro.sousapluriproj.pt]
    > Sent: Monday, January 21, 2002 12:28 PM
    > To: 'Bryan Allerdice'
    > Subject: RE: Disabling Terminal Service access by default
    >
    >
    > There is no problem in all users by default have the terminal servive
    > checkbox checked, because they still haven´t permissions to use that
    > service. To any user (except administrator) use terminal services
    > they need
    > to have permissions to log on localy in the server in question. You
    > configure that in the policys of de server!
    >
    > -----Original Message-----
    > From: Bryan Allerdice [mailto:bryan_allerdiceyahoo.com]
    > Sent: sábado, 19 de Janeiro de 2002 20:02
    > To: focus-mssecurityfocus.com
    > Subject: Disabling Terminal Service access by default
    >
    >
    > When I add users to a Windows 2000 server, they are granted
    > Terminal Service
    > access by default.
    >
    > How do I deny them access by default.
    >
    > I understand that one answer will have to do with the rights of a user,
    > based on what group they are part of, but I am also (mainly) interested in
    > what part of the registry causes the Grant Access Via Terminal Services
    > checkbox to be checked.
    >
    > Recently I've been using the ADDUSERS tool from the resource kit,
    > and to the
    > best of my knowledge, I don't have the ability to define Terminal Services
    > access via this tool, which is why I'm asking.
    >
    > Any help would be appreciated.
    >
    > BRYAN
    >
    >
    > _________________________________________________________
    > Do You Yahoo!?
    > Get your free yahoo.com address at http://mail.yahoo.com


    _________________________________________________________
    Do You Yahoo!?
    Get your free yahoo.com address at http://mail.yahoo.com