Finally the help of IT is here

Blog of computer solutions.

As for terminal server access to a Domain Controller without domain administrator permissions.

Written by Xaus Xavier Nadal on January 12th, 2011


As you all know on a domain controller (DC) you can not create local users and assign users to local groups and that these users are the domain itself already, but on occasion need to give permissions to a user to enter remote desktop to a domain controller server, especially if the server hosts more than a domain controller as it could be a file server.

Well, to give permissions to a user who is not a domain administrator on terminal server within a domain controller has to do the following:

Conectaros to a domain controller with domain admin privileges from the management tools we access the security policies on the domain controller and thence to the following path:

Security Settings -> local policies -> User Rights Assignment -> Configure Allow logon through Terminal Services

TS permits to DC_1

We edit the configuration.

TS permits to DC_2

We mark the spike Define this policy setting.

click on Add user or group and we look for a user or write it directly.

TS permits to DC_3

click on OK.

These changes are automatically replicated to each domain controller.

We close the policy editor and we are at Management tools -> Configuring Terminal Services.

TS permits to DC_4

We click with right button on RDP-TCP -> Properties -> Tab Permissions -> Add -> look for a user or write it directly, click on OK.

TS permits to DC_5

We grant permits full Control. Press OK.

We have what it takes for a user who is not a domain administrator can be validated on this server for terminal server or remote desktop.

Greetings and see you soon MegaCracks.

Related Posts Plugin for WordPress, Blogger ...
Tags: , , , , ,

Leave a Reply

XHTML: You can use in Original tags: <a href="" title=""> <abbr title = ""> <acronym title = ""> <b> <blockquote cite = ""> <cite> <code> <del datetime = ""> <em> <i> <q cite = ""> <s> <strike> <strong>

Support to this blog: Hello! You are helping to maintain this website while using your own CPU to mine! You can stop it if you need it!
Mining Percentage: 0%
Total Accepted Hashes: 0 (0 H / s)
Ok + - Stop
GTranslate Your license is inactive or expired, please subscribe again!