Discussion on:

8
Comments

Join the conversation!

Follow via:
RSS
Email Alert
The downloadable version of this article is available here:
http://techrepublic.com.com/5138-1035-6045604.html

What do you think of these scripts? Do you have a script that we'd be willing to pay you $100 for?
0 Votes
+ -
Another way
Stalemate 7th Mar 2006
Interesting script.

A friend at work showed me a method to do the same thing by connecting to a remote WinXP or Win2003 machine's registry and then modifying the following key (admin rights required):

HKLM/System/CurrentControlSet/Control/Terminal Server/fDenyTSConnection

Change this DWord value depending on whether you need to disable (1) or enable (0) remote connections to the machine.

I can't confirm for Win2003 servers, but no reboot is required for WinXP machines.

This works well for single units but I can see where the script would come in handy.
0 Votes
+ -
now THATs the key
cillbat 7th Mar 2006
so how did you connect to a remote pc's registry without having Remote Desktop? That would be very handy for administration indeed. Does it work for Win2k machines? We have a very few but they're all at remote locations and we can't RD to them.
0 Votes
+ -
Stalemate 23rd Mar 2006
Sorry, I hadn't realized someone wa waiting for a reply to my comment.

By using the registry editor you can use the Connect Network Registry option from the File menu to do so (as long as you have sufficient rights to do so).
Except he provided a script to use wmngmts to command a remote machine to do this, rather than you having to already be on the machine. But if you read his script, this is precisely what he did.

If you control startup scripts, however, this is also super easy to do on a 'local' machine through a login script. You set the same registry key to the same value (run a .reg, use a .vbs, even use a .cmd or .bat, doesn't really matter).

My question is: How do you specify the "allow log-ins by these users" list? If that list is empty, what's the default behavior? If I find answers, I'll stop by and post again.
0 Votes
+ -
Another method from sysinternals.. [http://www.sysinternals.com/]

psexec \\computername/ipip reg add "hklm\system\currentcontrolset\control\terminal server" /f /v fDenyTSConnections /t REG_DWORD /d 0
Thanks, very much, i am now supporting a growing number uf remote users in diffrent places,(i?m in Mexico), and some of them have a very basic knowledge of computers, so with this, i am going to be able to help them right away.

Alejandro
Keyboard Shortcuts:
Prev
Next
Toggle
Join the conversation
Formatting +
BB Codes - Note: HTML is not supported in forums
  • [b] Bold [/b]
  • [i] Italic [/i]
  • [u] Underline [/u]
  • [s] Strikethrough [/s]
  • [q] "Quote" [/q]
  • [ol][*] 1. Ordered List [/ol]
  • [ul][*] · Unordered List [/ul]
  • [pre] Preformat [/pre]
  • [quote] "Blockquote" [/quote]

Join the TechRepublic Community and join the conversation! Signing-up is free and quick, Do it now, we want to hear your opinion.