SBS-2003 and Terminal Services Question

[InIT4theMoney]

In our office, we have a SBS-2003 server and have just installed a new terminal services server (running Windows Server 2003 standard edition) alongside. The new server's role has been defined as a terminal server, it has been configured with an appropriate static IP address and added (as a member server?) to the SBS domain. A computer account for 'terminalserver' (original name huh?!) now appears in the computer list in the AD on the SBS server.

I have installed a test user account on the terminal server (in the local users list in computer management), added the user to the terminal server's local 'remote desktop users' group and can log onto the terminal server successfully. (I have modified the SBS's ISA server to direct port 3389 requests to the terminal server) so it would appear the terminal server is working fine.

I now want to give each TS user his/her own folder on the SBS computer and map their My Docs folder on their TS desktop to their folders on the SBS. For security reasons, I want to restrict access to the TS users folders on the SBS to just those users. So my question is this - how can I give a local user on the terminal server access permissions to a folder on the SBS? I have tried going to the security tab on the test user's folder on the SBS but it will only list accounts on the SBS, not those on the terminal server, for inclusion in the permissions list.

Have a feeling I'm being dumb here, but would still be grateful if someone could help me along!!

Many thanks

Ian W

 

[Albion]

Isn't SBS limited to being the only DC in the forest with no trusts allowed? If so you will not be able to get any access to the SBS server from your terminal server.

My suggestion is to upgrade the SBS server to a standard 2003 server. SBS was built to be the only server on the network for small businesses which do not need multiple servers. You have just added a second server in which MS wants you to upgrade to standard server. Their rational is that if you need two servers, you're no long a small business but a medium business.

Good luck

-Al

 

[devastator]

As long as you loaded the TS as a member server, and not with Active Directory you will be able to access your SBS server. So when users log on, they are verified through your SBS Server. You would need to load your license service on an AD server so you would just load that on the SBS server and in the TS licensing point to the SBS server. Be sure to turn of the TS licensing in services though on the TS. That is how we have it set up here but with a 2000 TS and an SBS 2003 server.