How to turn off Terminal Services access for all users except Administrator?

Question

Here comes a real softball for your sysadmins from a lowly programmer:

We have a machine with Terminal Services enabled so our clients can preview the next version of our product. I want to turn off Terminal Services for our users while I remote into the machine and perform an upgrade.

How do I turn off Terminal Services access for all users except Administrator? (I'm using Windows Server 2003.)

Bonus: Is there a way I can leave a polite rejection message if they try to connect while I'm performing the upgrade?

Thanks!

Solution 1

This is setup by default. You would need to make sure those users that should be allowed in are in the administrators or "remote desktop users" group to allow access. If they must be admins you can take out that group and specify only certain users.

Right click my computer, manage, click "remote" tab, click "enable remote desktop on this computer", click "select remote users"

I don't know a way to change the "you don't have access to term in" message.

Solution 2

Hmm there is no date on this post, but all the answers here are very primitive in my opionion.

If you open "terminal services configuration" there is a tab called "permissions" Remove the remote desktop users from here, apply the settings and voila.

As for leaving a note at login. This can be done before the login screen even appears using the local group policy. (found in administrative tools)

The option you would look for is called: "interactive logon: Message text for users attempting to log on"

Hope this helps.

Ben

www.prime-networks.co.uk

Comments

[Matt]

which works because you will already be connected and you can log the others off. Here is the rub though, if your upgrade requires a restart you are in real trouble.

[Jeremy Viet]

That's true if you forget to enable remote logins again and don't have physical access to the server/networked kvm.

[Matt]

which I am assuming must be the case or he would not say "How do I turn off Terminal Services access for all users except Administrator?" otherwise he should sit down at the machine and unplug the netowrk cable. (said in jest of course :)