Server access question

[scj6771]

We have an employee who we would like to give remote access to only one of our servers without giving him any rights to "screw" things up. now we currently use several products like NetMeeting, Remote Desktop (Microsoft) and DameWare to remote into other desktops to fix any issues but I do not believe you can limit the user who connects to these desktops to certain rights.

I guess what I am saying is would it be possible for this guy to log into the server remotely and restrict what he can do? Our servers are logged in as an administrator so I am assuming he will have access to do whatever he wants?

I hope this makes sense. Thanks for your time.

[Lespaul20]

Not real familiar with RD, but I believe you still have to be authenticated to log into a computer remotely. Therefore you can restrict the user based on the log in ID they use. I may be off though.

[mairving]

You can do it pretty easily through group policy. What I would do is to create a policy restricting users rights to that particular computer. Users don't have to be administrators to login to a TS session unless the server is also a domain controller. If it was a DC you would have to make them a Domain Administrator which is a big no no.

[faulkner132]

If all you want to do is allow access to the single server only:

1. Open the Local Security Policy Editor (Start > Admin Tools)
2. Under Security Settings > Local Policies > User Rights Assignment, there is a key called "Allow Log on through Terminal Services"
3. Add the user (or group) account to this list and they will be able to log in through remote desktop.