Thread: Varying from Terminal Server Remote Admin to Application

I’m presently making use of Windows Server 2000 with a Domain Controller. I also presently have the users making use of Terminal Server Remote Admin for accessing the files which are there on the server. This is not good! I also wish to alter it but I am also not sure if I am able to run into a problem if I change to the Terminal Server in Application Server Mode.

What sort of problems might I’m been encountered with. Is it right if there are two people who are having access at any time because that is all that access before.
I would also like to modify this as soon as possible because of my security worry.

Thanks

No, there is no users running on my DC is not good, but for installing the Terminal Services in Application Server mode on your Terminal Service will also make it inferior. If the users who only requires to access some of the files, unable for you to put those files in a shared folder?

Yes you are able to put files in a shared folder but how can I access to the data? Please provide me with complete answer. I am new for doing this. One person who has suggested me for altering the rights for allowing the users to access throughout the Remove Access by giving the Domain Users that remote in access to log in nearby but when I set up an account to do this, I also make an attempt to login distantly I received the following message, "You do not have access to logon to this session". I think I can do it this way but what extra rights do I need to give this user?

Any suggestions that will allow the remote users for accessing the data but will also allow you to constrict down the security which is appreciated.
Thanks

I consider that we are misunderstanding each other. If your users only require accessing some data files, like Word documents, then they can just connect to the shared folder from their workstation. But I guess that they may require running an application which is on the server, which in its turn accesses the data files, is that what you mean?
If I were you, then I would totally rethink about my setup. This is not going to be a protected solution, since you will have then to give the users the right for logging on locally on your Domain Controller. You can also try to secure it with NTFS permissions on the file system of the server, but even then, it's not a secure setup.