Monday, June 23, 2008

[THIN] Re: Terminal Services Configuration

Is that really necessary?  It is not recommended (nor possible via normal means) to disable the administrator's account.  If you're worried about someone getting in the machine and having admin rights then keep the scope of the administrators group to the local administrator and keep a ghost image of the server for easy recovery.

Joe

On Mon, Jun 23, 2008 at 5:15 AM, Berny Stapleton <berny@technology.net.au> wrote:
The administrator account on this host is disabled, and I am trying to replace it. Effectively, I want the Administrator SID to be useless, unfortunately from what I have seen so far is that Windows is hard coded in places to use the Administrator SID, so this is going to be impossible. I would like to get as close to it as possible though.

The only way I can get the admin account back now is to boot off a CD and modify the registry offline.

Berny


2008/6/23 Joe Shonk <joe.shonk@gmail.com>:

Run with elevated rights?

Joe

On Mon, Jun 23, 2008 at 4:23 AM, Berny Stapleton <berny@technology.net.au> wrote:
Hi all,

Does anyone know how to allow permissions to modify / configure the Terminal Services Configuration without adding someone to the Administrators group?

I have given the user Full Control on the permissions tab, but they can't modify the configuration...

Thanks,

Berny



No comments: