Announcement

Collapse
No announcement yet.

Hardening Terminal Services 2008 (was: Terminal Services 2008)

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Hardening Terminal Services 2008 (was: Terminal Services 2008)

    Hello,

    I'm pretty new to TS2008 but have been working with Terminal Services and Windows Server, GPO etc for long enough that I not a newb.

    One thing I have never used on any version of Windows is Software Restriction Policies. I am setting up a new TS08 and would like to ensure that the users can do only what I want them to do. Would someone be kind enough to give me some pointers, gotcha's and general know-how on this?

    So how would you go about securing a TS08 server where the users will only run Outlook03 and FileMaker Pro? They will probably need to do more but I thought it would be easier to start pretty basic.

    I already have the server installed and apps installed. Everything works now but I want to start by restricting the users to only the apps mentioned.

    X

  • #2
    Re: Terminal Services 2008

    The simple thing is using application publishing and not allow users to logon into the server.

    Software restrictions is nice, but can be override easily.

    For security consider to use Citrix and/or:

    http://www.appsense.com/solutions/terminalservers.aspx
    Best Regards,

    Yuval Sinay

    LinkedIn: https://www.linkedin.com/in/yuval14, Blog: http://blogs.microsoft.co.il/blogs/yuval14

    Comment


    • #3
      Choose a better topic for your thread!

      First of all, please make sure you pick a better topic for your next thread.

      As for the restriction - As Yuval said, some of these can be overridden by experienced users. For a better hardening you should consider implementing 3rd-party tools. However using GPOs and software restrictions will get you started.
      Cheers,

      Daniel Petri
      Microsoft Most Valuable Professional - Active Directory Directory Services
      MCSA/E, MCTS, MCITP, MCT

      Comment


      • #4
        Re: Hardening Terminal Services 2008 (was: Terminal Services 200

        Ok. Thanks for all the info.

        Comment

        Working...
        X