Re: User and Group Permissions

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

"susan" <susan@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:F5831718-3CA4-40C0-8043-5C4AFD5CCCC1@xxxxxxxxxxxxxxxx
> Please help a novice. By default, I am the administrator of Windows Server
> 2003 in our office. We are very small software developer. We use the
server
> for testing purposes for our clients. The one main reason that we
installed
> Active Directory was to have clients come in via Remote desktop and test
the
> software while not being able to access Control Panel, network
neighborhood,
> etc. I had it set to only open the software when these guest clients
logged
> on, but we want them to be able to have a desktop and access two different
> programs. I have tried following directions from books and Help manual,
but I
> keep coming back to the same place- access to Network Neighborhood and
> Control Panel are not restricted. Either I am making this too complicated
or
> it _is_ too complicated for me to figure out. I need a real dummies lesson
on
> what steps to take.


It's actually pretty hard -- but doable -- to have "two apps"
available in Terminal Services/Remote Desktop.

You can do one app easily.

With two apps you the easiest way is to build a group (do it with a separate
group so you won't mess up other things) then go through all the files they
MIGHT get access to and DENY access on those Executables.

Explorer and the control panel is pretty easy.

Alternatively you can try doing it with Software Restriction Policies
using Paths (and put the two apps in a common directory structure.)



--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]

>
> TIA
>


.

Relevant Pages

  • User and Group Permissions
    ... I am the administrator of Windows Server ... Active Directory was to have clients come in via Remote desktop and test the ... software while not being able to access Control Panel, network neighborhood, ... Control Panel are not restricted. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Remote Windows 2003 server setup
    ... you do not want to join the windows server 2003 to ... Windows server AD newsgroup: ... the office for the 4 clients. ... you may want to contact Microsoft CSS directly. ...
    (microsoft.public.windows.server.sbs)
  • Re: Error 80072EFD....yet again
    ... Microsoft Security Advisory: Microsoft Windows Server Update ... clients that used to be able to auto-update without problems. ... and configured all sites in Trusted Sites on clients and in ISA Management ...
    (microsoft.public.windowsupdate)
  • Re: Adding Windows NT 3.5 Client to Domain
    ... >> Windows Server 2003 requires all clients participate in ... >> I don't believe you can turn off SMB signing in 2003. ... This will allow backward level clients to authenticate into the domain. ... Microsoft Windows MVP - Active Directory ...
    (microsoft.public.windows.server.active_directory)
  • Re: Printing issues since Windows 2003 Service Pack 1 was applied
    ... > MVP - Windows Server - Clustering ... > "A troubleshooter's best tool is the Event Viewer and understanding the ... Our clients are windows XP SP2. ...
    (microsoft.public.windows.server.clustering)