Webcredential GUI password change by user

[madmax]

Hello

How can I turn possible to my users change the we credential password during the sessions (not windows password) ? I'm testing 9.50

Thanks in advance.

[admin]

Hello,

These password are set by the administrator and cannot be changed by the user for the time being.

[ramalhotra]

Hi

While using seamless client, the user can change the password by pressing CTRL-ALT-END by selecting password charge option. User can also access the Task Manager with this option.

Is there any solution to avoid is so that user can not perform such functions.

Rajesh

[IvanGB]

Hi Rajesh.

I have a small list of instructions to my team to secure the server right afterwards installing TSplus. You can find it bellow. The last instruction is directly regarding what you are asking for. See if it fits your needs.

Run mmc.exe with administrative privileges
Click File > Add or Remove Snapin
Select "Group Policy Object Editor" and click Add >
A wizard will show up. Click Browse, click the Users tab, and select "Non-Administrators".
Click OK, then click Finish in the wizard.
Click OK in the "Add Snapin" dialog.

Go to Local Computer\Non-Administrative Policy > User Configuration > Administrative Templates > Windows Components > File Explorer.
Find "Hide these specified drives in My Computer" and double click it.
Choose the Enabled radio button and choose Restrict all drives
Click bellow the File Explorer entry, in Common Open File Dialog
In Hide the common dialog places bar, Enabled
In Hide the dropdown list of recent files, Enabled
In Items displayed in Places Bar, insert the word Desktop at "Item 1" of "Places to display"
Click OK

Enter in User Configuration > Administrative Templates > System > Ctrl+Alt+Del Options
Remove Task Manager -> Enabled
Click OK

Hope it helps.

Cheers.

Ivan

[ramalhotra]

Hi Ivan

Thanks for giving suggestions to secure the server. Kindly clarify the following.

- My server is without Active Directory Domain Controller. Is there any use of doing group policy setting "Non Administrator" in mmc.exe as giving in your message. Because after doing these settings too , if I login as administrator then also drives remains hide. I just would like to know how to implement this policy for "Non Administrator" without active directory.

- If we remove "Taskbar Manager " form Ctrl+Alt+Del option. Then it gets remove from Administrator login also where as I need to check the performance time to time. Please advise what can be done.

Best Regards
Rajesh

[IvanGB]

Hi Rajesh.

The instructions I listed are not for a Domain Controller. Moreover, when we have a Domain Controller to install TSplus I have a different set of instruction for them to follow. If you need it, let me know. The Group Policy Editor can be reached either using gpedit.msc or running mmc.exe and adding a Snap-in. Then, the instructions should be fine. If this doesn't fit your needs, TSplus has itself an option you can use to Hide Disk Drives in the Security tab. I played with it in the beginning but remember it didn't work the way I needed.

Regarding the Ctrl+Alt+Del option, if you have admin users, they can just log-in to the server and they will be able to run the TaskManager from the Windows Desktop.

Hope it helps.

Cheers.

Ivan

[ramalhotra]

Hi Ivan

Thanks again for your reply.

Everything works perfect now as per my choice when we do these settings by mmc.exe and adding a Snap.in.

Once again thanks.

Rajesh

[IvanGB]

Hi Rajesh.

You're most welcome.
Glad it worked for you.

Best.

Ivan

[ramalhotra]

Hi Ivan

I need your favor to answer one more question.

I would like to activate policy "Terminate and disconnected session" after 5 minutes for Non Administrator users only. When I enable this policy in MMC through Snap-in , it does not work. But when I activate it trough TSPLUS Group Policy , it works fine but for all users including Administrator. How I can activate this policy for Non Administrator users only. I have also tried to enable it from User menu but id does not work.

Regards
Rajesh

[IvanGB]

Hi Rajesh.

I hope someone else will jump in and give you some more accurate answer about this.
I will have to test on my side before I say anything, since I haven't yet tried your scenario. If I get some time to spare later, I will let you know.

Cheers.

Ivan