Windows 2000 Server Administration

xtreme35967 · 10-18-2004, 02:01 AM

I have a few questions. How can I configure Server so that you can not just hit ecs on the clients and still be able to log in? I want to make it so that if you do not have a user account on my server then you can not log on to any computer in the domain. Also how can I configure it to were you can not log onto the computer locally? Thanks for your help.

Shakie · 10-18-2004, 09:25 AM

ECS, are you talking about Exchange Conferencing Server?

If you don't have a user account on the authenticating server then a user shouldn't be able to log on to the domain, unless you have more than one authenticating server.

You can create a GPO so that users can't log on locally.

(GPO = Group Policy Object)

HoLoCroN · 10-18-2004, 08:36 PM

Worst case scenario, if you have trouble with the GPO's, you can just have the Administrator Group on the "Log on Locally" right. That will prevent everyone except the administrators from loging on.

xtreme35967 · 10-19-2004, 12:13 AM

Ok you know how with Win 98 you can just press esc and be able to use the computer? Well I want to disable that function.

xtreme35967 · 10-19-2004, 12:56 AM

Also what is the dif in server 2000 and server 2003? I am thinking of upgrading. Is all the set up in them the same or is it a little dif. And can you tell me were the GOP is for not logging on locally. Thanks

xtreme35967 · 10-21-2004, 04:05 AM

IS NO ONE GOING TO HELP ME

mdshort · 10-21-2004, 07:51 AM

I don't think windows 2000 allows the escape function.

killians45 · 10-21-2004, 07:43 PM

I dont think it does, either. Some differneces in 2kserver and 2k3server is in 2k3 server it is setup for use of the newer IP address assignment (IPv6 i think)... anyhow, its a 64 bit address using both hex and dec (I think the MAC address is used for the HEX bit), IIS is more secure on just a straight setup, but the biggest difference will be in active directory improvements. Depending on the size of the network and what you are doing with it 2k3server may not really be needed, and you can just about make win2k server IIS as secure if tweaked right.

xtreme35967 · 10-22-2004, 01:49 AM

Thanks about the Info on server 2k and 2003. Ok I know that win2k does not allow the esc function. I have a workstation that is running win98 that is on my domain. I need to disable the esc function on that computer. I know it can be done with GOP but will you tell me exactly were the permission is?

Thanks Again.

BuckingFastard · 10-26-2004, 04:28 PM

I'm not sure where you can find it anymore, or even how to set it up, but for Windows 98 and Windows NT 4 there was a program called poledit. Basically it let you easily edit Windows 98 policies. You could google it and research it further.

10-18-2004, 02:01 AM	#1 (permalink)
xtreme35967 Newb Techie Join Date: Oct 2004 Posts: 28	Windows 2000 Server Administration I have a few questions. How can I configure Server so that you can not just hit ecs on the clients and still be able to log in? I want to make it so that if you do not have a user account on my server then you can not log on to any computer in the domain. Also how can I configure it to were you can not log onto the computer locally? Thanks for your help.

10-18-2004, 09:25 AM	#2 (permalink)
Shakie Wizard Techie Join Date: Jan 2003 Posts: 3,320	ECS, are you talking about Exchange Conferencing Server? If you don't have a user account on the authenticating server then a user shouldn't be able to log on to the domain, unless you have more than one authenticating server. You can create a GPO so that users can't log on locally. (GPO = Group Policy Object) __________________ `(\ /) This is Bunny. Add him to your signature (O.o) to help him achieve world domination. (> <)` `Shakie Smodministrator \"If I don\'t step over the line every now-and-then, how will I know where it is?\"`

10-21-2004, 07:43 PM	#8 (permalink)
killians45 Wizard Techie Join Date: Apr 2004 Posts: 3,248	I dont think it does, either. Some differneces in 2kserver and 2k3server is in 2k3 server it is setup for use of the newer IP address assignment (IPv6 i think)... anyhow, its a 64 bit address using both hex and dec (I think the MAC address is used for the HEX bit), IIS is more secure on just a straight setup, but the biggest difference will be in active directory improvements. Depending on the size of the network and what you are doing with it 2k3server may not really be needed, and you can just about make win2k server IIS as secure if tweaked right. __________________ If you argue with an idiot he will drag you down to his level and beat you with experience. I am not a fast writer. I am not a slow writer. I am a half-fast writer. -Robert Asprin

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

10-18-2004, 08:36 PM	#3 (permalink)
HoLoCroN Monster Techie Join Date: Mar 2004 Location: Plant City, FL Posts: 1,293	Worst case scenario, if you have trouble with the GPO's, you can just have the Administrator Group on the "Log on Locally" right. That will prevent everyone except the administrators from loging on.

10-19-2004, 12:13 AM	#4 (permalink)
xtreme35967 Newb Techie Join Date: Oct 2004 Posts: 28	Ok you know how with Win 98 you can just press esc and be able to use the computer? Well I want to disable that function.

10-19-2004, 12:56 AM	#5 (permalink)
xtreme35967 Newb Techie Join Date: Oct 2004 Posts: 28	Also what is the dif in server 2000 and server 2003? I am thinking of upgrading. Is all the set up in them the same or is it a little dif. And can you tell me were the GOP is for not logging on locally. Thanks

10-21-2004, 04:05 AM	#6 (permalink)
xtreme35967 Newb Techie Join Date: Oct 2004 Posts: 28	IS NO ONE GOING TO HELP ME

10-21-2004, 07:51 AM	#7 (permalink)
mdshort Super Techie Join Date: Feb 2004 Posts: 303	I don't think windows 2000 allows the escape function.

10-22-2004, 01:49 AM	#9 (permalink)
xtreme35967 Newb Techie Join Date: Oct 2004 Posts: 28	Thanks about the Info on server 2k and 2003. Ok I know that win2k does not allow the esc function. I have a workstation that is running win98 that is on my domain. I need to disable the esc function on that computer. I know it can be done with GOP but will you tell me exactly were the permission is? Thanks Again.

10-26-2004, 04:28 PM	#10 (permalink)
BuckingFastard Junior Techie Join Date: Oct 2004 Posts: 73	I'm not sure where you can find it anymore, or even how to set it up, but for Windows 98 and Windows NT 4 there was a program called poledit. Basically it let you easily edit Windows 98 policies. You could google it and research it further.