[THIN] Re: Logon Disabled
- From: "Walter, Chris" <christopher.walter@xxxxxxx>
- To: "'thin@xxxxxxxxxxxxx'" <thin@xxxxxxxxxxxxx>
- Date: Wed, 13 Apr 2005 14:20:19 -0400
The policy will override your 'logon Enable/Disable' setting in the CCC and
the CHANGE LOGON /DISABLE command meaning if you have the policy set to
enabled and you disable logons users will still be able to logon.
This is the error message you get if you try do disable logons using a DOS
Prompt.
"Connections are currently ENABLED by Group Policy for this machine, unable
to change."
If you do it through the CCC or Terminals Services Configuration you get no
error message back and actually thinks it has disabled the logons and users
still get connected to this server (Just tested this and got a message back
saying there was no route to the specified address.
Chris
-----Original Message-----
From: Steve Greenberg [mailto:steveg@xxxxxxxxxxxxxx]
Sent: Wednesday, April 13, 2005 1:31 PM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Logon Disabled
Chris,
What do you mean by override CHANGE LOGON?
thanks
Steve Greenberg
Thin Client Computing
34522 N. Scottsdale Rd. suite D8453
Scottsdale, AZ 85262
(602) 432-8649
(602) 296-0411 fax
steveg@xxxxxxxxxxxxxx
_____
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf
Of Walter, Chris
Sent: Wednesday, April 13, 2005 6:39 AM
To: 'thin@xxxxxxxxxxxxx'
Subject: [THIN] Re: Logon Disabled
Actually 'change logon' is a Terminal server command and you don't need
Metaframe installed to run it. The change did happen in Windows 2003 though
so that it didn't enable itself after a reboot.
Joe: Did you check your policies for "Allow Users to connect remotely using
Terminal Service" under Computer Configuration\Administrative
Templates\Windows Components\Terminal Services? This policy will override
the CHANGE LOGON command if you have it enabled.
Chris
-----Original Message-----
From: Henry Sieff [mailto:hsieff@xxxxxxxxxxxx]
Sent: Tuesday, April 12, 2005 11:21 PM
To: thin@xxxxxxxxxxxxx; thin@xxxxxxxxxxxxx; thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Logon Disabled
No, its Metaframe.
_____
From: thin-bounce@xxxxxxxxxxxxx on behalf of Landin, Mark
Sent: Tue 4/12/2005 8:34 PM
To: thin@xxxxxxxxxxxxx; thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Logon Disabled
Metaframe XP behavior is that disabled logins are re-enabled after reboot.
This changed in MPS 3.0 ... disabled logins are still disabled after reboot.
(Actually, I cannot recall with certainty if that behavior is defined by
Metaframe, or by Windows itseld. If the latter, replace "Metaframe XP" with
"Windows 2000" and "MPS 3.0" with Windows 2003).
-----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx on behalf of Jeff Durbin
Sent: Tue 4/12/2005 7:13 PM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Logon Disabled
I disagree with your statement about disabled logons surviving a reboot. I'm
not in a place where I can test it, but with XP on Win2K, I'd bet money that
logons are re-enabled after a reboot.
-----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx
<mailto:thin-bounce@xxxxxxxxxxxxx> ] On Behalf
Of Joe Shonk
Sent: Tuesday, April 12, 2005 2:44 PM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Logon Disabled
Again, what Mark was saying...? What's the point? Why would Citrix direct
a user to a server that has logins Disabled when it could have easily
directed the user to a server that has logins enabled?
Citrix monitors this specific setting and even writes it to the LHC (so
disabled logins will survive a reboot)
Joe
-----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx
<mailto:thin-bounce@xxxxxxxxxxxxx> ] On Behalf
Of Walter, Chris
Sent: Tuesday, April 12, 2005 2:35 PM
To: 'thin@xxxxxxxxxxxxx'
Subject: [THIN] Re: Logon Disabled
It's more for disabling logins long enough to install an application without
somebody logging on and messing up your install. Remember that if you don't
have your policies set a user could still login into the desktop simply by
setting it up in the Program neighbourhood. Even if you disable the
published applications or even the IMA service a user can still log directly
onto the server through Program neighbourhood. Disabling the logins will
prevent all logon's except from the console though.
Chris
-----Original Message-----
From: Landin, Mark [mailto:Mark.Landin@xxxxxxxxxxxxxxxx
<mailto:Mark.Landin@xxxxxxxxxxxxxxxx> ]
Sent: Tuesday, April 12, 2005 5:14 PM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Logon Disabled
>This is normal behavior. If you don't want people to connect to that
>server you either have to remove the server from the published
>application or stop the IMA service on the server. All 'disable
>logons'
>does is prevent people from logging onto the server, it doesn't stop
>your clients from being directed to that server to access a published
>application.
And what is the point of that? If that is a deliberate design feature, I'm
unable to see it's benefit.
********************************************************
This Weeks Sponsor: RTO Software TScale
TScale provides a cost-effective way to improve performance, capacity and
stability for thin-client servers like Citrix MetaFrame or Microsoft
Terminal Services running Windows NT, 2000 or 2003.
http://www.rtosoft.com/enter.asp?id)6
<http://www.rtosoft.com/enter.asp?id)6>
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm <http://thin.net/links.cfm>
ThinWiki community - Excellent SBC Search Capabilities!
http://www.thinwiki.com <http://www.thinwiki.com>
***********************************************************
For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use
the below link:
http://thin.net/citrixlist.cfm <http://thin.net/citrixlist.cfm>
********************************************************
This Weeks Sponsor: RTO Software TScale
TScale provides a cost-effective way to improve performance, capacity and
stability for thin-client servers like Citrix MetaFrame or Microsoft
Terminal Services running Windows NT, 2000 or 2003.
http://www.rtosoft.com/enter.asp?id=296
<http://www.rtosoft.com/enter.asp?id=296>
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm <http://thin.net/links.cfm>
ThinWiki community - Excellent SBC Search Capabilities!
http://www.thinwiki.com <http://www.thinwiki.com>
***********************************************************
For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use
the below link:
http://thin.net/citrixlist.cfm <http://thin.net/citrixlist.cfm>
********************************************************
This Weeks Sponsor: RTO Software TScale
TScale provides a cost-effective way to improve performance, capacity and
stability for thin-client servers like Citrix MetaFrame or Microsoft
Terminal Services running Windows NT, 2000 or 2003.
http://www.rtosoft.com/enter.asp?id=296
<http://www.rtosoft.com/enter.asp?id=296>
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm <http://thin.net/links.cfm>
ThinWiki community - Excellent SBC Search Capabilities!
http://www.thinwiki.com <http://www.thinwiki.com>
***********************************************************
For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use
the below link:
http://thin.net/citrixlist.cfm <http://thin.net/citrixlist.cfm>
********************************************************
This Weeks Sponsor: RTO Software TScale
TScale provides a cost-effective way to improve performance, capacity and
stability for thin-client servers like Citrix MetaFrame or Microsoft
Terminal Services running Windows NT, 2000 or 2003.
http://www.rtosoft.com/enter.asp?id=296
<http://www.rtosoft.com/enter.asp?id=296>
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm <http://thin.net/links.cfm>
ThinWiki community - Excellent SBC Search Capabilities!
http://www.thinwiki.com <http://www.thinwiki.com>
***********************************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm <http://thin.net/citrixlist.cfm>
********************************************************
This Weeks Sponsor: RTO Software TScale
TScale provides a cost-effective way to improve performance, capacity and
stability for thin-client servers like Citrix MetaFrame or Microsoft
Terminal Services running Windows NT, 2000 or 2003.
http://www.rtosoft.com/enter.asp?id)6
<http://www.rtosoft.com/enter.asp?id)6>
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm <http://thin.net/links.cfm>
ThinWiki community - Excellent SBC Search Capabilities!
http://www.thinwiki.com <http://www.thinwiki.com>
***********************************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm <http://thin.net/citrixlist.cfm>
Other related posts:
