Terminal Services on a domain controller

[hercu1es23]

Hi All,

I need some clarification............

If Terminal services (Admin mode) is installed on a domain controller.............and users accessing this server must be given the 'log on locally' user right on the DC, Does this also mean that any user (i.e whether its and administrators account, guest account or regular domain user accont) specified with the user right to 'log on locally' will be able to connect to the DC via terminal services ?

Hope is question is not too confusing. Any thoughts on this will be appreciated.

Urmilla

 

[Davetoo]

Yes they will be able to connect to the DC via terminal services, but they'll still be restricted by the NTFS rights on the DC.

After all, you have restricted the user rights on your DC's haven't you?

I'm Certifiable, not certified.
It just means my answers are from experience, not a book.