Restricting terminal users to Win2K Server functions

[ccrb]

We're dealing with a small church where a half dozen people will connect via terminal services. Presently no one but administrator could connect to terminal server, so I put them all in the system operators group (a bad idea I'm thinking) and they can now log in.

However they can even reboot the server from home.

I've not done work with policy editor, but I'm thinking this is where I need help. I want to set the users to be standard users only, have specific access only to a few programs on the server (a PDC) and restrict access to most admin type things including control panel functions, even command prompt functions.

Is there a step by step tutorial on this somewhere? I've been searching the net and not found what I'm looking for.

Any help, most appreciated.

 

[karmic]

ok, number one are you running in application server mode or remote admin? sounds like you're running in remote admin.

http://support.microsoft.com/default.aspx?scid=kb;en-us;306626&Product=win2000

If you're in application mode, do you have any licenses?
Do your users have rights to log into the terminal server? check the user account to verify...

~ K.I.S.S - Don't make it any more complex than it has to be ~

 

[ccrb]

Good question. I forgot that there were two modes. The fact that they had to be administrators makes me think I'm in remote admin.

Each user setup is checked off to allow terminal services.

Is there a checklist on setting this up for applications?

Regarding licenses... I don't know. Each terminal is WinXP pro or home. Are additional licenses needed?

 

[ccrb]

DUH! I just saw the link you posted. Thanks!

 

[karmic]

I may be wrong but I think when you run winXP pro, you don't need additional licenses for terminal server.



~ K.I.S.S - Don't make it any more complex than it has to be ~