本文介绍了如何通过组策略增强Windows Server 2003的Terminal Services（TS）安全性，包括限制CD和软盘访问、隐藏最后登录用户名、禁用帮助和支持服务、限制远程会话、禁止驱动器重定向、设置断开连接超时等，以提高TS环境的安全性和管理效率。
2、在组策略中的推荐设置：
1）Computer Configuration → Windows Settings → Security Settings → Local Policies → Security Options：
Devices: Restrict CD-ROM access to locally logged-on user only = Enabled
Devices: Restrict floppy access to locally logged-on user only = Enabled
Interactive logon: Do not display last user name = Enabled
2）Computer Configuration → Windows Settings → Security Settings → System Services：
Help and Support = Disabled
3）Computer Configuration → Administrative Templates → Windows Components → Terminal Services：
Restrict Terminal Services users to a single remote session = Enabled
Remove Disconnect option from Shut Down dialog box = Enabled
4）Computer Configuration → Administrative Templates → Windows Components → Terminal Services → Client/Server data redirection：
Do not allow drive redirection = Enabled
5）Computer Configuration → Administrative Templates → Windows Components → Terminal Services → Sessions：
Set time limit for disconnected sessions = Enabled
6）Computer Configuration → Administrative Templates → Windows Components → Windows Installer：
Disable Microsoft Windows Installer = Enabled – Always
7）Computer Configuration → Administrative Templates → System → Group Policy：
User Group Policy loopback processing mode = Enabled
8）User Configuration → Windows Settings → Folder Redirection：
最低0.47元/天 解锁文章
扫一扫
406
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
