Announcement

Collapse
No announcement yet.

Restrict user on terminal server...

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Restrict user on terminal server...

    Hi all,

    I have TS-2003 and I wont to set a "permission set" for a group of users.
    The users are locale and some of them are part of a domain (NT4 domain)...

    How can I prevent from this group from executing applications (except application I chose for them), and how do I customize there environment whiteout changing anything on all other users...

    On NT4 there was the "poledit"... is there something like it on the new 2003?

    thanks,
    Gili

  • #2
    Poledit

    You can configure poledit to restrict the users but there may other options.

    1. Dont configure the users as members of "Power Users" or/and "Administrator" in the local machine/domain.

    2. Use "gpedit.msc" to configure local policy. To eliminate the policy to
    affect local "Administrators" group, configure NTFS permission to deny
    access to "C:\WINDOWS\system32\GroupPolicy".

    3. Add the Win 2003 TS to Win 2003 domain - and use the nice GPO
    to restrict users.

    4. Disable files download from the Internet Explorer + restrict access
    to local drive + disable local client disk mount/mapping to the
    Terminal Server.


    5. If the users use only one program - configure it to auto lunch when the user
    Logon.
    Best Regards,

    Yuval Sinay

    LinkedIn: https://www.linkedin.com/in/yuval14, Blog: http://blogs.microsoft.co.il/blogs/yuval14

    Comment


    • #3
      try using the loopback processing in gpo. http://support.microsoft.com/default...b;en-us;231287

      good luck

      shai
      Good Luck

      Shai

      MCSE 2003+Security;MCSE 2003+Messaging
      HP ASE;HP AIS;HP APS

      So, from me to all of you out there, wherever you are, remember:
      the light at the end of the tunnel may be you. Good Day!

      Comment

      Working...
      X