(Windows
2008 Server:
Lesson 10)
{ Configuring Remote
Desktop Users }
Section 0.
Background Information |
- Overview
- This lab with show you how to configure Windows
2008 Server to allow Remote Desktop users to connect remotely.
- This lab will show you how to add users to the
Remote Desktop Users Group.
- This lab will show you how to configure the
"Allow log on through Terminal Services" GPO.
Section 1. Login to
your W2K8 server. |
- Start your Windows 2008 Server
- Instructions:
- Click on W2K8 Server
-
Make
sure you are using a bridged connection before
clicking on play.
- Click on Play virtual machine

- CRTL + ALT + DELETE
- Instructions
- Virtual Machine
- Send Ctrl+Alt+Del

- Login as Administrator
- Click on the Administrator icon.

- Login
- Command:
Provide the password for the Administrator account.

Section 2. Allow
Remote Desktop Connection |
- Open Control Panel
- Instructions:
- Start --> Control Panel
- Open System
- Instructions:
- Double click System
- Open Remote settings
- Instructions:
- Click on Remote settings
- Configure System Properties
- Instructions:
- Select Allow connections from computers
running any version of Remote Desktop.
Section 3. Configure
the "Allow log on through Terminal Services" Policy |
- Launch Group Policy Editor
- Instructions:
- In the search box, type "gpedit.msc"
- Click on gpedit
-

- Navigate to the "Allow log on through Terminal
Services" Policies
- Instructions:
- Computer Configuration -->
Windows Settings --> Security Settings --> Local Policies --> User
Rights Assignment
- Double Click on policy "Allow log on
through Terminal Services"
-

- Add Users to the "Allow log on through Terminal
Services" Policies
- Instructions:
- Click on the Add User or Group...
button.
- Add Users to Group
- Instructions:
- In the Text Box type "Boss" and Click
the Check Names Button.
- In the Text Box type "Team" and Click
the Check Names Button.
- In the Text Box type "Worker" and Click
the Check Names Button.
- Click OK

- Apply and Save
- Instructions:
- Click Apply
- Click OK
Section 4. Add Users
to Remote Desktop Users Group |
- Go To Active Directory Users and Computers
- Instructions:
- Start --> Administrative Tools -->
Active Directory Users and Computers.

- Select the Remote Desktop Users Group
- Instructions:
- Active Directory Users and Computers
--> security.student --> Builtin
- Double Click on Remote Desktop Users
- Select the Members Tab.
- Instructions:
- Select the Members Tab.
- Select the Add.. Button.
- Add Users to Group
- Instructions:
- In the Text Box type "Boss" and Click
the Check Names Button.
- In the Text Box type "Team" and Click
the Check Names Button.
- In the Text Box type "Worker" and Click
the Check Names Button.
- Click OK
- Apply and Save
- Instructions:
- Click Apply
- Click OK
Section 5. Terminal
Services Configuration |
- Open the Terminal Services Configuration
- Instructions:
- Start --> Administrative Tools -->
Terminal Services --> Terminal Services Configuration

- Open Restrict each user to a single session
- Instructions:
- Right click on Restrict each user to a
single session
- Select Properties
- Verify the Properties
- Instructions:
- Make sure all three check boxes are
checked, especially "Restrict each user to a single session.
- Click the OK Button
- Open a Command Prompt
- Instructions:
- Start --> Command Prompt

- Update Group Policies
- Instructions:
- gpupdate /force
- ipconfig
- Note:
- Note my W2K8's IP Address is
192.168.1.106. In your case it will probably be different.
- Note your IP Address for the following
section.
Section 7. Test
Remote Desktop Connection |
- Booting up WindowsVulerable01 (Victim
Machine)
-
Instructions:
- Start up VMware Player
- Select WindowsVulerable01
-
Make sure you are using a bridged connection
before clicking on play.
- Play Virtual Machine
- Note:
- For those of you not part of my
class, WindowsVulerable01 is a Windows XP machine running
SP2.
- WindowsVulerable01 Authentication
-
Instructions:
- Login as administrator
- Start Remote Desktop Connection
-
Instructions:
- Start --> Accessories -->
Communications --> Remote Desktop Connection.
- Remote Desktop Connection Options
-
Instructions:
- Click on the Options Button
- Remote Desktop Connection Configuration
-
Instructions:
- Computer: 192.168.1.106
- This is
your W2K8 IP Address.
- User name: manager
- Supply the Active Directory Manager Password
- Domain: SECURITY
- Bring up a command prompt
-
Instructions:
- Start --> Command Prompt
- Proof of Lab
-
Instructions:
- gpresult /V | findstr
INTERACTIVE
- date
- echo "Your Name"
-
Proof of Lab
Instructions:
- Do a PrtScr
- Paste into a word document
-
Answer the following questions:
- What is the name of the
group that is a required membership for a remote user to
login?
- What is the name of the
Terminal Services policy that is required for all remote
users to login?
- What is the name of the check box
that would be needed
to be unchecked to allow a user to login with multiple
sessions?
- Upload to Moodle
|
- Proof of Lab
-
Instructions:
- Do Section 7, Step 7.
-
Proof of Lab
Instructions:
- Do a PrtScr
- Paste into a word document
-
Answer the following questions:
- What is the name of the
group that is a required membership for a remote user to
login?
- What is the name of the
Terminal Services policy that is required for all remote
users to login?
- What is the name of the check box
that would be needed
to be unchecked to allow a user to login with multiple
sessions?
- Upload to Moodle
|

|