Overclock.net › Forums › Software, Programming and Coding › Networking & Security › Windows 7 remote desktop
New Posts  All Forums:Forum Nav:

Windows 7 remote desktop - Page 3

post #21 of 27
Thread Starter 
Quote:
Originally Posted by Warsteiner View Post

I believe everything you are trying to accomplish can be done through Group Policy. On your machine log in as an administrator and run gpedit.msc. The settings you are looking for are under Computer Configuration\Administrative Templates\Windows Components\Remote Desktop Services. You should pay extra attention to Computer Configuration\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Connections. Just make sure you google the settings before you change them in order to make sure that you understand what exactly they do. Also if you are trying to login as the local Administrator to a Windows 7 box it is disabled by default. You can re-enable it by going to computer management. Just expand out users and groups and click on users. You should see the Administrator account there. Right click on it and go to enable. That will let you log on as a the local administrator.
Let me be clear though that I do not recommend you enable the local Administrator account as it is disabled as a security measure. It is better to create your own account with admin privelages and escalate when necessary.

If that is the case how does it allow me to login in as Admin under other machines if I havent enabled it in security?? If it works above, I owe you a beer, and of course rep, too. thumb.gif

EDIT:
how do you disable Admin then?? On two machines I can login. Do you have a tutorial by any chance you can link me to?
OverKill
(18 items)
 
  
CPUMotherboardGraphicsGraphics
AMD Phenom II X6 1055T Gigabyte 890FXA ATI FirePro V3800 ATI FirePro V3800 
RAMHard DriveHard DriveOptical Drive
16gb GSkill 10666 Seagate Western Digital  LG Blue Ray 
CoolingOSMonitorMonitor
stock air 7 Pro 64 bit (2)22" Acer x223w (2)23" Acer G235H 
KeyboardPowerCaseMouse
Microsoft Wireless Antec 900watt Antec 300 Wacom Tablet 
Audio
Logitech Speakers and sub 
  hide details  
Reply
OverKill
(18 items)
 
  
CPUMotherboardGraphicsGraphics
AMD Phenom II X6 1055T Gigabyte 890FXA ATI FirePro V3800 ATI FirePro V3800 
RAMHard DriveHard DriveOptical Drive
16gb GSkill 10666 Seagate Western Digital  LG Blue Ray 
CoolingOSMonitorMonitor
stock air 7 Pro 64 bit (2)22" Acer x223w (2)23" Acer G235H 
KeyboardPowerCaseMouse
Microsoft Wireless Antec 900watt Antec 300 Wacom Tablet 
Audio
Logitech Speakers and sub 
  hide details  
Reply
post #22 of 27
Quote:
Originally Posted by Warsteiner View Post

I believe everything you are trying to accomplish can be done through Group Policy. On your machine log in as an administrator and run gpedit.msc. The settings you are looking for are under Computer Configuration\Administrative Templates\Windows Components\Remote Desktop Services. You should pay extra attention to Computer Configuration\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Connections. Just make sure you google the settings before you change them in order to make sure that you understand what exactly they do. Also if you are trying to login as the local Administrator to a Windows 7 box it is disabled by default. You can re-enable it by going to computer management. Just expand out users and groups and click on users. You should see the Administrator account there. Right click on it and go to enable. That will let you log on as a the local administrator.
Let me be clear though that I do not recommend you enable the local Administrator account as it is disabled as a security measure. It is better to create your own account with admin privelages and escalate when necessary.

^agreed
Quote:
Originally Posted by graphicsman View Post

If that is the case how does it allow me to login in as Admin under other machines if I havent enabled it in security?? If it works above, I owe you a beer, and of course rep, too. thumb.gif
EDIT:
how do you disable Admin then?? On two machines I can login. Do you have a tutorial by any chance you can link me to?

You need to add yourself to the group>administrators under My Computer>Manage>Local Users and Groups...you are part of a domain correct?. The best thing to do with the admin is to give it a password that only your system admin knows(and you of course). this way people can't get in by just hopping in.

Also you can try:
My Computer>Properties>Remote>Select Remote Users
then just add your user name.


this will make sure you can get in...if you can't access their drives for some reason do this:
My Computer>Right Click the drive>Properties>Security
Now just add yourself to the list and turn on all permissions.
***Keep in mind you will need to be an admin before you can do this.

not sure if i answered your question or not.
let me know how it goes bud
post #23 of 27
Thread Starter 
Quote:
Originally Posted by Hazzeedayz View Post

^agreed
You need to add yourself to the group>administrators under My Computer>Manage>Local Users and Groups...you are part of a domain correct?. The best thing to do with the admin is to give it a password that only your system admin knows(and you of course). this way people can't get in by just hopping in.
Also you can try:
My Computer>Properties>Remote>Select Remote Users
then just add your user name.
this will make sure you can get in...if you can't access their drives for some reason do this:
My Computer>Right Click the drive>Properties>Security
Now just add yourself to the list and turn on all permissions.
***Keep in mind you will need to be an admin before you can do this.
not sure if i answered your question or not.
let me know how it goes bud

i went to manage then local users but Admin was not created. I created it and then was able to log in remotely. I disabled Administrator and Admin from logging in. BUT how do i build a proper administrator?? I would like some access levels remotely but would prefer not allowing a full Administrative privileges. Suggestions??
OverKill
(18 items)
 
  
CPUMotherboardGraphicsGraphics
AMD Phenom II X6 1055T Gigabyte 890FXA ATI FirePro V3800 ATI FirePro V3800 
RAMHard DriveHard DriveOptical Drive
16gb GSkill 10666 Seagate Western Digital  LG Blue Ray 
CoolingOSMonitorMonitor
stock air 7 Pro 64 bit (2)22" Acer x223w (2)23" Acer G235H 
KeyboardPowerCaseMouse
Microsoft Wireless Antec 900watt Antec 300 Wacom Tablet 
Audio
Logitech Speakers and sub 
  hide details  
Reply
OverKill
(18 items)
 
  
CPUMotherboardGraphicsGraphics
AMD Phenom II X6 1055T Gigabyte 890FXA ATI FirePro V3800 ATI FirePro V3800 
RAMHard DriveHard DriveOptical Drive
16gb GSkill 10666 Seagate Western Digital  LG Blue Ray 
CoolingOSMonitorMonitor
stock air 7 Pro 64 bit (2)22" Acer x223w (2)23" Acer G235H 
KeyboardPowerCaseMouse
Microsoft Wireless Antec 900watt Antec 300 Wacom Tablet 
Audio
Logitech Speakers and sub 
  hide details  
Reply
post #24 of 27
Quote:
Originally Posted by graphicsman View Post

i went to manage then local users but Admin was not created. I created it and then was able to log in remotely. I disabled Administrator and Admin from logging in. BUT how do i build a proper administrator?? I would like some access levels remotely but would prefer not allowing a full Administrative privileges. Suggestions??

use group policy to manage domain credentials. it's the easiest way.
all you do is create groups, set their privileges, and then drag and drop users to the groups you want.
This would be MUCH MUCH easier than having to add users in every machine under a certain group.
post #25 of 27
Thread Starter 
Quote:
Originally Posted by Hazzeedayz View Post

use group policy to manage domain credentials. it's the easiest way.
all you do is create groups, set their privileges, and then drag and drop users to the groups you want.
This would be MUCH MUCH easier than having to add users in every machine under a certain group.

how do you add a group than?? I was under the impression in manage > Local groups, i created a group there called "Employees" and when i go to mmc i do not see the option other than each individual, administrator, or non-administrator when selecting for group policy
OverKill
(18 items)
 
  
CPUMotherboardGraphicsGraphics
AMD Phenom II X6 1055T Gigabyte 890FXA ATI FirePro V3800 ATI FirePro V3800 
RAMHard DriveHard DriveOptical Drive
16gb GSkill 10666 Seagate Western Digital  LG Blue Ray 
CoolingOSMonitorMonitor
stock air 7 Pro 64 bit (2)22" Acer x223w (2)23" Acer G235H 
KeyboardPowerCaseMouse
Microsoft Wireless Antec 900watt Antec 300 Wacom Tablet 
Audio
Logitech Speakers and sub 
  hide details  
Reply
OverKill
(18 items)
 
  
CPUMotherboardGraphicsGraphics
AMD Phenom II X6 1055T Gigabyte 890FXA ATI FirePro V3800 ATI FirePro V3800 
RAMHard DriveHard DriveOptical Drive
16gb GSkill 10666 Seagate Western Digital  LG Blue Ray 
CoolingOSMonitorMonitor
stock air 7 Pro 64 bit (2)22" Acer x223w (2)23" Acer G235H 
KeyboardPowerCaseMouse
Microsoft Wireless Antec 900watt Antec 300 Wacom Tablet 
Audio
Logitech Speakers and sub 
  hide details  
Reply
post #26 of 27
Quote:
Originally Posted by graphicsman View Post

how do you add a group than?? I was under the impression in manage > Local groups, i created a group there called "Employees" and when i go to mmc i do not see the option other than each individual, administrator, or non-administrator when selecting for group policy

Here's a few guides to get you started:
XP
How to use GP to manage local PCs in WinXP
Video for Group Policy in XP

Win7
This one is extremely detailed
group policy overview and a "how it works" tutorial


there is so much you can do with GP that you'd be better off going through a tutorial.
These guides should get you started and comfortable with GP so that you can understand how the architecture works and what it can/can't do.
hope this helps cheers.gif
post #27 of 27
i have sub to this...
Server1 - Main
(17 items)
 
Slow Coach
(17 items)
 
 
CPUMotherboardGraphicsRAM
4790K Asus z97 Hero Gigabyte 980Ti 6gb Kingston Hyper X 2400 
Hard DriveHard DriveHard DriveCooling
M500 M500 OCZ ARC H100i 
OSMonitorMonitorMonitor
Windows 10 Enterprise  Prolite GB2488HSU Prolite GB2488HSU Prolite GB2488HSU 
KeyboardPowerCaseMouse
Razer Corsair AX860 Fractal Design R4 Razer Mamba 
Audio
Razer 
CPUMotherboardRAMHard Drive
1055T Gigabyte 990fx UD5 corsair 4 x 2 GiG 2 x 1 terabyte Western Black 
Hard DriveOptical DriveCoolingOS
3 x 500 gig WD Black Pix Fractal Design Fans x 2 Server 2012 
MonitorKeyboardPowerCase
mstsc mstsc 400 watt corsair Fractal Design R5 
MouseOtherOtherOther
mstsc EATON 5110 UPS StarView SV231UADVI KVM LSI controller card 4 port 
Other
Intel DualPort Gigabit NIC PRO1000PT 
  hide details  
Reply
Server1 - Main
(17 items)
 
Slow Coach
(17 items)
 
 
CPUMotherboardGraphicsRAM
4790K Asus z97 Hero Gigabyte 980Ti 6gb Kingston Hyper X 2400 
Hard DriveHard DriveHard DriveCooling
M500 M500 OCZ ARC H100i 
OSMonitorMonitorMonitor
Windows 10 Enterprise  Prolite GB2488HSU Prolite GB2488HSU Prolite GB2488HSU 
KeyboardPowerCaseMouse
Razer Corsair AX860 Fractal Design R4 Razer Mamba 
Audio
Razer 
CPUMotherboardRAMHard Drive
1055T Gigabyte 990fx UD5 corsair 4 x 2 GiG 2 x 1 terabyte Western Black 
Hard DriveOptical DriveCoolingOS
3 x 500 gig WD Black Pix Fractal Design Fans x 2 Server 2012 
MonitorKeyboardPowerCase
mstsc mstsc 400 watt corsair Fractal Design R5 
MouseOtherOtherOther
mstsc EATON 5110 UPS StarView SV231UADVI KVM LSI controller card 4 port 
Other
Intel DualPort Gigabit NIC PRO1000PT 
  hide details  
Reply
New Posts  All Forums:Forum Nav:
  Return Home
  Back to Forum: Networking & Security
Overclock.net › Forums › Software, Programming and Coding › Networking & Security › Windows 7 remote desktop