Terminal Server's Use of "Access This Computer From Network"

Article translations Article translations
Article ID: 186490 - View products that this article applies to.
This article was previously published under Q186490
This article has been archived. It is offered "as is" and will no longer be updated.
In order for a client to log on to a Terminal Server computer, the user must belong to a group that has the right to log on locally to the server. The right to access the computer from the network is not required to log on to a Terminal Server computer across the network from a client. For greater security, an administrator can use User Manager to remove the group Everyone from the right "Access this computer from the network" for Terminal Server computers installed as stand-alone or member servers. Doing so allows only those with administrative accounts and administrative rights to connect to a Terminal Server computer using shares or administrative tools.

Note that you should not make this change if a Terminal Server computer is installed as a domain controller because rights set on any domain controller apply to every domain controller. Removing the right to access this computer from the network would prevent all network users from accessing network resources.
Expand all | Collapse all

Properties

Article ID: 186490 - Last Review: October 8, 2013 - Revision: 2.1
APPLIES TO
  • Microsoft Windows NT Server 4.0, Terminal Server Edition
Keywords: 
kbnosurvey kbarchive kbinfo KB186490

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com