Re: Controlling access to MSTSC.exe


"Michael Hum" <MichaelHum@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:0C7BD084-94B4-4281-B84A-2F0502302844@xxxxxxxxxxxxxxxx
> Hi,
> i'm running a Windows 2003 enivronment with XP SP1 desktops. I'm
> searching for a group policy object to control access to the "remote
desktop
> client (mstsc.exe) on the XP workstations. Meaning, allow a specific
domain
> group the ability to launch "remote desktop client". I've tried the "dont
> run specified Windows applications" in User Configuration\Administrative
> Templates\System which works nicely to restricts the mstsc.exe from
> "running". However, it does not allow restriction by groups. Does anyone
> know of a custom ADM with the restrict application by group option? Or is
> there a better method to control users from launching the mstsc.exe file.
>
> Help!
>
> Thanks,
>
> Michael

Instead of preventing users from running mstsc.exe, you could
set a domain policy on the server itself that allows only suitably
authorised users to logon under RDP. It's one of the many
domain policies available to you.


.

Relevant Pages

  • RE: Event ID: 1104
    ... Microsoft CSS Online Newsgroup Support ... <One of the client desktops, running Windows XP w/SP2, was experiencing ... <Windows cannot perform filter check for Group Policy object ... <The associated filter cannot be found. ...
    (microsoft.public.windows.server.sbs)
  • RE: Event ID: 1104
    ... Please ask the problematic user logon a good workstation, ... <One of the client desktops, running Windows XP w/SP2, was experiencing ... <Windows cannot perform filter check for Group Policy object ... <The associated filter cannot be found. ...
    (microsoft.public.windows.server.sbs)
  • Re: password secured files
    ... You do not use passwords in Windows XP on files, ... Password your Administrator accounts and tightly control access to ALL ... An easier way to read newsgroup messages: ...
    (microsoft.public.windowsxp.security_admin)
  • Re: windows 2003 server [beginner]
    ... Well that's because domain users don't have LOCAL administrative rights to ... Enable Printer and File Sharing in a Group Policy Object ... This is better because then the print server processes the print job, ... share a printer from a windows XP machine then that machine will process ...
    (microsoft.public.windows.server.general)
  • RE: Questions Re: users/groups, security and GPOs
    ... To "OfficeDept" group scenario: ... Create a new group policy object and set it as follows: ... Restrict Users from Running Specific Windows Programs in ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)