Guys,

We are using a third party software that requires local admin to the server.
The third party software is running on a workstation. It connects to the
server where the sql database resides.

I am fine with giving this priviledge, but don't want the person to rdp into
this server. Anything I can do to prevent this? I am thinking of
restricting the firewall to block the rdp session for this particular IP.
Anything else besides that I can do that doesn't conflict with the local
admin rights?

Thanks,
Tnt

Hi Tnt,

On the server open admin tools / Local security policy / select Local
Policies / User rights assignment / Go to the "Deny log on through Terminal
Services" and add this user. That is if the user is a member of local admins
and not the actual administrator!

Should work - good luck,

CreateWindow
http://justpageprobe.com
The FREE Web page utility you always wanted.
Monitor your enterprise Web Servers.
Keep your router connected.
Email your IP to where you need it.



"tnt" <tnt@discussions.microsoft.com> wrote in message
news:3376715A-8D7C-4423-BCC1-AEFBD324B2BC@microsoft.com...

Thanks so much. I will give it a try on my vm machine and post back on how
well it works.

Tnt.

"CreateWindow" wrote: