Switch default permissions for application compatibility

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

To switch default permissions for application compatibility

Open Terminal Services Configuration.
In the console tree, click Server Settings.
In the details pane, right-click Permission Compatibility, and then click Properties.
Select Full Security to provide the most secure environment or select Relaxed Security to provide an environment that is compatible with most legacy applications, and then click OK.

Notes

To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure. For more information, see Default local groups, Default groups, and Using Run as.
To open Terminal Services Configuration, click Start, click Control Panel, double-click Administrative Tools, and then double-click Terminal Services Configuration.
You can configure this option only when Terminal Server is installed on a server. This option does not apply to servers that are used for remote administration.
If you select Full Security, Terminal Server Users will have the same permissions as members of the Users group. You should use Full Security whenever possible.
If you select Relaxed Security, all Users will have full access to critical registry and file system locations. This may be necessary in order to run legacy applications.

Your server might function differently based on the version and edition of the operating system that is installed, your account permissions, and your menu settings. For more information, see Viewing Help on the Web.