Terminal Services logg off / shut down

[WillieLoMain]

I am about to roll out my first application server under TS. Previously I have used only admin mode and have therefore never concerned myself with non admins gaining acces to the machine.

When a user has finished a TS session and is ready to log off - I am concerned that they could shut the server down by accident or on purpose.

Is there a way to set shut down permissions to prevent the user from doing anything but logging off?

Thanx in advance.

 

[jgoodman00]

A standard user cannot shut down a TS server. They will have either the option to log off or disconnect. I think you can even revoke the disconnect permission...

James Goodman MCP

http://www.angelfire.com/sports/f1pictures

 

[WillieLoMain]

what is the difference between a log off and a disconnect?

Also - If I can prevent a USER from disconnect - thereby forcing a logoff - how is that done?

thanx

 

[zebratech]

you can force a user to log off using the Terminal Services Configuration Manager (under the Administration Tools folder). Click on the Connections folder, right click on the Connection Type icon in the right window, select Properties, click on the Sessions Tab, snap the Overide User Settings Box, and you can select how and when to disconnect a user. Explore all of the Properties dialogue box for cool things you can do.
Good Luck,

 

[penauroth]

The difference between a logoff and a disconnect is that when a user disconnects they are technically still logged on the machine and whatever applications they have open will still be there when they reconnect to the TS server. Logoff will close all applications, terminate the remote user's session and RDP connection.


Paul

 

[CasDeTroy]

Get to your domain policy>computer configuration>windows settings>security settings>Local policies>User rights...shut down the system (fix users u need to be able to shut down system)

 

[tahoe2]

I just used MMC and the local computer policy snap-in to remove the shut down feature from the start menu (we only have the one W2K member server so we aren't using AD... pity I know). I then saved the console to the admin tools folder and whenever I need to restart the server, I just disable the setting until I am done.

Hope this helps,

Corie

 

[Zelandakh]

You can shut down a TS if you are a local admin. OR you can use local security policy to stop even certain people being able to do it.

 

[WillieLoMain]

More on this topic.

I have a USER on this sys that comes in with Remote Desktop Conection.

He has a bad habbit of x-ing out from the RDC tab that persists at the top of the screen during the session.

It seems this is essentially a disconnect and doing this is a pain becasue it allows him to maintain access to some files while he is disconnected and interferes with backup etc.

Is there a way to prevent him from doing anything but a log off.

I have looked through the items above and do not see the answer there.

I am not running AD.

Thanx in advance