best method to restrict application execution on terminal servers

What is the best way to restrict users from running certain applications
on Win2k3 Terminal Server?

I mostly just want to segregate between domain users and domain admins
and have a list of software that domain users can run and have domain
admins run any of the software.

if I were to create GPO for on gpmc what steps do I need to this to
implement
this on a single terminal server?

can I use software security restriction to do this also?

Thanks,
Tadashi


.

Relevant Pages

  • Re: Domain Users cant execute applications on SBServer
    ... execute the program on the Terminal Server. ... the domain user logon workstation have administrator permission ... Add the domain users group to Terminal Server local Administrators group: ...
    (microsoft.public.windows.server.sbs)
  • Re: Domain Users cant execute applications on SBServer
    ... Addind Domain Users to the Administrators on the Terminal Server ... I copied the application executable to the Terminal Server ... but that they can execute the application if initiated from ... the domain user logon workstation have administrator permission ...
    (microsoft.public.windows.server.sbs)
  • Re: Domain Users cant execute applications on SBServer
    ... Can you run filemon/regmon on the terminal server to see what is ... What kind of application is that on the SBS? ... The client installation has been run on the Terminal Server (by the ... if you logon to the TS as one of the above domain users (who ...
    (microsoft.public.windows.server.sbs)
  • Re: Restricting users from running applications on Win2k3 Terminal Server
    ... Depending on your AD structure there are a number of ways to apply ... > on Win2k3 Terminal Server? ... > I mostly just want to segregate between domain users and domain admins ...
    (microsoft.public.windows.server.general)
  • Restricting users from running applications on Win2k3 Terminal Server
    ... What is the best way to restrict users from running certain applications ... on Win2k3 Terminal Server? ... I mostly just want to segregate between domain users and domain admins ...
    (microsoft.public.windows.server.general)