Re: best method to restrict application execution on terminal servers

I would probably apply a GPO the OU where the terminal server is located.
You can restrict to users to run only certain apps here:
User Configuration, Administrative Templates, System.
The two group policy setting I would try are:
"Dont Run Specific Windows Applications"
or
"Run only allowed Windows Applications"
Specify the apps you do or don not want to run.

You will also need to enable "User Group Policy lookback processing mode"
found at:
Computer Configuration, Administrative Templates, Group Policy

Last, set Deny apply group policy for the domain admins group.

"Tadashi Inayama" <inayama@xxxxxxxxxxxxxxxxx> wrote in message
news:uoRrlx3RFHA.3544@xxxxxxxxxxxxxxxxxxxxxxx
> What is the best way to restrict users from running certain applications
> on Win2k3 Terminal Server?
>
> I mostly just want to segregate between domain users and domain admins
> and have a list of software that domain users can run and have domain
> admins run any of the software.
>
> if I were to create GPO for on gpmc what steps do I need to this to
> implement
> this on a single terminal server?
>
> can I use software security restriction to do this also?
>
> Thanks,
> Tadashi
>
>


.

Relevant Pages

  • Re: Confused about policies and profiles
    ... Change the group policy on the User Configuration part to restrict ... group called TS Users and apply to them only and to the Terminal Server ... > I am under the impression that I need to have a profile and/or policy in ...
    (microsoft.public.windows.terminal_services)
  • Re: cannot open Console1.msc
    ... It sounds like the group policy setting called "Restrict the user from ... place your user account and the terminal server into ...
    (microsoft.public.win2000.group_policy)
  • Re: Restrict to 1 program
    ... Easiest is to do this in a Group Policy. ... User Configuration - Administrative templates - Windows Components ... doesn't apply to Administrators: ... I have a win2k3 server setup as a terminal server. ...
    (microsoft.public.windows.terminal_services)
  • Re: Applying group policy to the server
    ... Using Group Policy in a terminal services environment should clear it up for ... Microsoft MVP - Terminal Server ... I cannot get the user configuration settings to apply. ...
    (microsoft.public.windows.terminal_services)
  • cant access CD files or burn to a CD at the workstation as domain user with local guest permissions
    ... CD-RW drive was working fine without group policy. ... After apply group policy with user configuration: ... "Prevent access to drives from my computer:" ... Set the local policies to enable "restrict access to CDrom to locally ...
    (microsoft.public.windowsxp.security_admin)