[TriLUG] Windows / Active Directory help needed

[John Berninger]

Aaron Bednar wrote:
> This works in our environment by doing the following:
>
> On the server:
> 1) Go to: Control Panel -> System -> Remote tab
> 2) Check "Enable Remote Desktop on the Computer"
> 3) Click select remote users
> 4) Enter usernames to RDP in there.
>
> The usernames entered there aren't domain admins and they aren't 
> members of the Remote Desktop Operators group.
I can do this no problem, but it sort of defeats the purpose of AD, 
which is centrally managing these permissions...

>> And beat your head against the wall right?  I'm pretty sure you can't 
>>  admin an AD box without the obligatory head banging :)   My  
>> condolences and or apologies to anyone who has to admin Windows for a 
>>  living.
Have been doing that for about a week and a half...  :)
>>> I'm guessing you've already enabled RDP on the server?
Yes, since Domain Admins can get in via RDP just fine.

-- 
John

Dovei'andi se tovya sagain.