Terminal Services under 2003 Q

[greyt_Autumn]

I'm not a Windows guy (yet)

We want to lock out users to the console in terminal services. Is it as simple as making sure that they are not members of the administrators group? We still want them to be able to login to RDP sessions and install apps etc. Just not access the console session or mod others passwords. We want to save that for use in the data center.

Thanks

[Demon10000]

I'm sure you could customize the users permissions. I recommend controlling this via a group. The problem you're going to run into is that you say you want to let your terminal server users install applications?

Maybe it's just my view of your project compared to what I've worked on but:

1. You never want end users install applications on your TS boxes.
2. If you're installing applications on a TS box, you're an admin and should know what you're doing anyway.