Hi,
I am running a Windows 2000 AD domain where a member 2003 advanced server provide terminal services. I want to prevent the terminal users to shutdown the 2003 server from their terminal sessions.
The TS are used on 2000Pro workstations authenticated in the 2000 AD and that includes the users used to log into win2000Pro. The terminal sessions are started on these workstations using the same user which is also part of a TS group I created that allows them to open terminal sessions on the 2003 server.
In order to block these users from shutting down the whole TS environment, I followed the instructions on Microsoft website at:
In the group policy snap-in, I created another OU called Terminal Sessions into where I moved the users that were normally under USERS underneath the domain.
I then started to modify the policy that I created and that should only apply to that new OU. The problem is that everyone in the domain will get their shutdown button removed, except for the terminal sessions which keep their button!!
I played with inheritance settings thinking that I could block any changes outside of the default domain controller policy, but to no avail!
There is something I am missing and I would dearly appreciate some help.
Thanks a lot
I am running a Windows 2000 AD domain where a member 2003 advanced server provide terminal services. I want to prevent the terminal users to shutdown the 2003 server from their terminal sessions.
The TS are used on 2000Pro workstations authenticated in the 2000 AD and that includes the users used to log into win2000Pro. The terminal sessions are started on these workstations using the same user which is also part of a TS group I created that allows them to open terminal sessions on the 2003 server.
In order to block these users from shutting down the whole TS environment, I followed the instructions on Microsoft website at:
In the group policy snap-in, I created another OU called Terminal Sessions into where I moved the users that were normally under USERS underneath the domain.
I then started to modify the policy that I created and that should only apply to that new OU. The problem is that everyone in the domain will get their shutdown button removed, except for the terminal sessions which keep their button!!
I played with inheritance settings thinking that I could block any changes outside of the default domain controller policy, but to no avail!
There is something I am missing and I would dearly appreciate some help.
Thanks a lot