Restrict or lockdown Terminal Server Session

[PLK3541]

I am using Windows Server 2003, and connecting remotely to the desktops via terminal service. It is working fine and every one can get to there desktops remotely as if they were at the office.

My problem is that everyone is coming into the Server as Domain Admins, and then to the server management screen to access the list of computer to make the remote connection.

I would like to limit the user interface so that they are not allowed to perform administrative task. I tried to just have them as Domain Users but then they need the Server Administrator password to logon. How can I restrict or lockdown the server when users logon?

 

[markdmac]

Yikes! I'd get those users out of Domain Admins QUICK!First off it sounds like you are using the TS in Admin mode instead of application mode.

How many users do you have? If under 75 then you should consider moving to SBS 2003 which offeres a secure application to do exactly what you are looking to do and the users can do it from any web browser.

I hope you find this post helpful.

Regards,

Mark

 

[PLK3541]

Hi, Markdmac

Yikes! Is right I have removed everyone from the Domain Admin until I can get my head around the licensing required.

I have less than 75 users in shop only about 20 at anytime, and I have 20 Win Server 2003 SBS CALs user licenses.
Licensing is setup for Remote Desktop for Administration.
One Server that is the Domain Controller and Terminal Server.

Question:

Do PCs accessing thru Terminal Service require TS CALs in addition to SBS CALs?

How can I change the Licensing from Admin mode to Application mode?

Will I need to install a Terminal Server as a Member server in a SBS 2003 network? Will that use a SBS CAL?

Thanks for your help!!!!

 

[markdmac]

I am not a license expert but will take a stab at this for you.

[red]Do PCs accessing thru Terminal Service require TS CALs in addition to SBS CALs?[/red][blue]
Yes[/blue]

[red]How can I change the Licensing from Admin mode to Application mode?[/red][blue]
On SBS you can't. On another server you must install Terminal Services via Control Panel, Add/Remove Windows Components. You also need to install Terminal Services Licensing, preferably on a DC.[/blue]

[red]Will I need to install a Terminal Server as a Member server in a SBS 2003 network? Will that use a SBS CAL?[/red]
[blue]Yes and yes.[/blue]


I hope you find this post helpful.

Regards,

Mark