JSI Tip 2507. Terminal Servicves users are granted additional permissions.

Terminal Servicves users are granted additional permissions so that older programs can run correctly on Windows 2000.

If you don't have any 'older programs', you can/should remove these additional permissions.

If you apply %systemroot%\security\templates\notssid.inf, your server will have the same default permissions as a standard Windows 2000 server, but Terminal Services will still be enabled.

To remove the permissions:

1. Open a CMD prompt.

2. Type: cd /d %systemroot%\security\templates and press Enter.

3. Type: secedit /configure /db notssid.sb /cfg notssid.inf /log notssid.log /verbose

If you change your mind, to can restore the default permissions and policies for all users and the default permissions for Terminal Services users. To restore these defaults:

1. Open a CMD prompt.

2. Type: cd /d %systemroot%\inf and press Enter.

3. Type:secedit /configure /cfg defltsv.inf /db defltsv.sb /log defltsv.log /verbose

NOTE: You should test a template before applying it to a production environment.


Hide comments

Comments

  • Allowed HTML tags: <em> <strong> <blockquote> <br> <p>

Plain text

  • No HTML tags allowed.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Lines and paragraphs break automatically.
Publish