I am looking for a way how to disable remote access to management console of single Windows Server 2008 R2 with least administrative effort.
Server is in domain and there is big amount of other computers and users in domain, hence looking for some local option rather than changing some settings on domain level.
I can disable usage of remote Server Management on server A that works as I would like - I am unable to access its Server Management from server B. However if I will open mmc on server B and add e.g. 'services' or 'computer management' snap-in, I am able to remotely access the server A this way
Need to avoid users to restrict from using mmc and particular snap-ins and preferably trying to find a way without using windows firewall and blocking this type of communication. I somehow deep inside do believe, that there could be some registry key or local policy setting that will simply disable remote access of mmc kind.
Obviously have to avoid any further 3rd party tools...
Anyone know how to achieve this? Or at least some hint would be appreciated.
EDIT: to make it bit more clear... I want to disable only remote possibility to e.g. restart services and 'force' administrators to logon to server using RDP