Can you switch Terminal Services from application mode to Remote mode on SBS safely?

Wow! I just another inherited another SBS 2000 with some tricky
weirdness. The previous IT company did the following (I only need help
with the last):

1. Installed SBS on an old box with a three year old single hard
drive!

(owner of company said she would have bought ten if it woud have
helped)

2. Named the local domain exactly the same as their external website!

3. Disabled ISA so he could sell them a fancy firewall with a ton of
ports wide open!

4. Installed Terminal Services in application mode just for the fun of
it!

I wouldn't be surprised if this server has one ear and answered to
"Lucky." Sorry, I had to vent.

Anyway, has anyone heard of reverting TS back to remote mode? I would
like to offer this feature, and I can't install certain features of
Symantec SBS 8.1 AV because the server is in application mode. I
didn't know if this is terribly risky or not.

Thanks!

Kevin
Tue Feb 10 15:37:59 CST 2004

The risk in using TS in Admin Mode is allowing users to access it. So, if
all users, except you don't have the ability to logon in TS mode, you're
fine. How do you do that? Go into AD User properties for each user, and go
to the Dialin tab, and make sure the option to allow then to access TS mode
is disabled!

--
Kevin Weilbacher [SBS-MVP]
"The days pass by so quickly now, the nights are seldom long"



"Steve Stewart" <steve@nospam.com> wrote in message
news:7aii20h3v36mgpcobjljp6c0l00vlk83lf@4ax.com...
>
>
> Wow! I just another inherited another SBS 2000 with some tricky
> weirdness. The previous IT company did the following (I only need help
> with the last):
>
> 1. Installed SBS on an old box with a three year old single hard
> drive!
>
> (owner of company said she would have bought ten if it woud have
> helped)
>
> 2. Named the local domain exactly the same as their external website!
>
> 3. Disabled ISA so he could sell them a fancy firewall with a ton of
> ports wide open!
>
> 4. Installed Terminal Services in application mode just for the fun of
> it!
>
> I wouldn't be surprised if this server has one ear and answered to
> "Lucky." Sorry, I had to vent.
>
> Anyway, has anyone heard of reverting TS back to remote mode? I would
> like to offer this feature, and I can't install certain features of
> Symantec SBS 8.1 AV because the server is in application mode. I
> didn't know if this is terribly risky or not.
>
> Thanks!

Steve
Tue Feb 10 16:47:06 CST 2004


My new Norton SBS 8.1 Antvirus software won't install completely on
this server in TS mode, so that is a motivating factor.

On Tue, 10 Feb 2004 16:37:59 -0500, "Kevin Weilbacher"
<kweilbacMVP@gte.net> wrote:

>The risk in using TS in Admin Mode is allowing users to access it. So, if
>all users, except you don't have the ability to logon in TS mode, you're
>fine. How do you do that? Go into AD User properties for each user, and go
>to the Dialin tab, and make sure the option to allow then to access TS mode
>is disabled!

Mark
Tue Feb 10 20:56:35 CST 2004

no problem going admin to app.....the other way "may" sometimes have issues,
but nothing earth shattering.

--
Sincerely,
Mark Mancini, CCA, CCNA, Master CIW&CI, CNE 4&5, MCSE+I 4&2000
www.MCSE2000.com
www.AppLauncher.com



"Steve Stewart" <steve@nospam.com> wrote in message
news:7aii20h3v36mgpcobjljp6c0l00vlk83lf@4ax.com...
>
>
> Wow! I just another inherited another SBS 2000 with some tricky
> weirdness. The previous IT company did the following (I only need help
> with the last):
>
> 1. Installed SBS on an old box with a three year old single hard
> drive!
>
> (owner of company said she would have bought ten if it woud have
> helped)
>
> 2. Named the local domain exactly the same as their external website!
>
> 3. Disabled ISA so he could sell them a fancy firewall with a ton of
> ports wide open!
>
> 4. Installed Terminal Services in application mode just for the fun of
> it!
>
> I wouldn't be surprised if this server has one ear and answered to
> "Lucky." Sorry, I had to vent.
>
> Anyway, has anyone heard of reverting TS back to remote mode? I would
> like to offer this feature, and I can't install certain features of
> Symantec SBS 8.1 AV because the server is in application mode. I
> didn't know if this is terribly risky or not.
>
> Thanks!