Access control by the Telnet server

As we all know, Telnet can be used for remote logon, which is also a favorite intrusion method by hackers. So in order to ensure security in this aspect. We performed permission control on the Telnet server. Here we will mainly explain some content that grants access permissions to the Telnet server.

Grant access to the Telnet Server

Application to: Windows Server 2008, Windows Vista

You must allow access by adding your account to the TelnetClients group on the Telnet server before you can connect to the Telnet server.

By default, the user is not a member of the group, and only members of the Local Administrators Group can successfully access the computer through the Telnet client.

Membership or equivalent identity in the Local Administrators Group is the minimum requirement to complete this process.

Grant access to the Telnet Server

To authorize a Telnet user to access the Telnet server, perform the following steps:

Create a local TelnetClients Group

Add a user to the TelnetClients Group

To create a local TelnetClients Group

Open the local user and group management unit. In the start search box, type mmclusrmgr. msc.

In the Navigation Pane, click group ".

If the group TelnetClients already exists in the details pane, go to the next step and add the user to the group.

Right-click "group" and click "new group ".

In the "Create group" dialog box, type the name TelnetClients. You can add the description as needed.

If you know the user you want to grant access permissions to, click "add" and enter the user name in the "Select User, computer, or group" dialog box. you can add users later by executing the next step as needed.

Click "CREATE ".

After the TelnetClients group is created, you can add members to the group. any member of this group can access the Telnet server service. the tasks that a member can execute when using Telnet connection depend on the permissions granted to the user account on the server computer and the resources carried by the computer.

To add a user to the TelnetClients Group

Open the "local users and groups" snap-in. In the "Start search" box, type mmc lusrmgr. msc.

In the Navigation Pane, click group ".

In the details pane, right-click TelnetClients and click Properties ".

In the "TelnetClient properties" dialog box, click "add ".

In the Select User, computer, or group dialog box, add the user or group to which you want to grant access permissions. for information about how to find and add users or groups, Press F1 to view "Access Control List help ".

Remarks

You can add groups and individual Users. For example, if the computer is mainly used as a Telnet server, you may want to add the group Everyone or Authenticated Users instead of adding each user account on the computer.

After adding all users and groups, click "OK" to save the changes.

Disable "local users and groups ".

Other considerations

If you set "the password must be changed upon next login" for the user account, attempt to use the Telnet client to log on to the Telnet server will fail. you must log on to Windows directly, change the password, and then use the new password to log on to the Telnet server again.

Other references

For more information about how to add user accounts to a group, see http://go.microsoft.com/fwlink/ on the Microsoft website? LinkId = 94796 may be an English webpage ).