User right to access windows terminal service in administration mo

[xiaomei]

Hi, there,
I am running windows 2000 server & SP4 with Terminal services enabled for
remote administration mode.
My object is clear, I want create a user account that it can logon the
server remotely by using terminal serivce connection, but it only can read
the information on the server, can not do any changes, however now it seems
only administrators are entiled to remotely logon the serve, so as long as he
has administrator right, he can do anything after logon.

Thanks for any advice.


Best regards

[Vera Noest [MVP]]

You have to do at least 2 things:

1. give the user the right to "Logon locally"
2. in Terminal Server Connection Configuration - rdp-tcp - rightclick
- permissions - add the user account with User rights

You will have to lock down your server further with NTFS permissions,
depending on what you want the user to be able to do.

_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
SQL troubleshooting: http://sql.veranoest.net
*----------- Please reply in newsgroup -------------*

Post by xiaomei
Hi, there,
I am running windows 2000 server & SP4 with Terminal services
enabled for remote administration mode.
My object is clear, I want create a user account that it can
logon the server remotely by using terminal serivce connection,
but it only can read the information on the server, can not do
any changes, however now it seems only administrators are
entiled to remotely logon the serve, so as long as he has
administrator right, he can do anything after logon.
Thanks for any advice.
Best regards