Giving Administrative Access

Simplest way is to give them permissions under their own user accounts.
ie Control Panel -> Users and Passwords
Either set up specific accounts for remote log in use only or amend current accounts to give administrative or power user permissions.The terminal services can (and should) also have password protection.

The above answer is essentially correct. At the very least, the users should be logging in with their own accounts - which in turn should be in the administrators group on the local server if they need that level of access...

...but the answer really depends on what the users need to do on the remote server...

Can you let us know what they need to do?

Cheers,
Tim.

Right now everybody is looging on as administrator. We have added the users that need the administrative access to the administrative group but they still cannot logon to terminal services with their username / password. I must be missing something here.

You need to make sure individual user accounts have terminal services access to terminal services. The administrative group by default is allowed to log onto terminal services for administrative access. However, licencing terminal services for usersneed to go through the microsoft clearing house.

To check if individuals have terminal services access. Go to administrative tools--active directory users and computers . Then click on an individual user--properties--terminal services profile--(there is a few options to be set here if not already set). I think this is mostly an individual thing by design.

Another way to allow users to log onto terminal services is to configure it through the terminal services configuration snap-in, then go to connections and set how users are allowed to log in. ie under connections--(select a connection)--then condfigure the properties.

I hope that helps.

ps If you want to use unix based machines, by all means there is third party software thatlets you utilise terminal services.

Depending on whether domain controller -
local security policy or domain controller security policy
user rights
log on locally - specifically allow another user name

This question was auto closed due to inactivity