Re: Restricting users from running applications on Win2k3 Terminal Server

Tech-Archive recommends: Fix windows errors by optimizing your registry

Yes you can use software restriction policies and apply them to the domain
or OU. Depending on your AD structure there are a number of ways to apply
this.

More information here
http://support.microsoft.com/default.aspx?scid=kb;en-us;324036

--
Rod
http://www.thelazyadmin.com


"Tadashi Inayama" <inayama@xxxxxxxxxxxxxxxxx> wrote in message
news:OdAKxu3RFHA.3664@xxxxxxxxxxxxxxxxxxxxxxx
> What is the best way to restrict users from running certain applications
> on Win2k3 Terminal Server?
>
> I mostly just want to segregate between domain users and domain admins
> and have a list of software that domain users can run and have domain
> admins run any of the software.
>
> if I were to create GPO for on gpmc what steps do I need to this to
> implement
> this on a single terminal server?
>
> can I use software security restriction to do this also?
>
> Thanks,
> Tadashi
>


.

Relevant Pages

  • Re: Problem with login to TS2003
    ... >> any events in the eventlog? ... MCSE, CCEA, Microsoft MVP - Terminal Server ... >> My terminal services server will only allow domain admins ... > Domain users have been given logon locally, ...
    (microsoft.public.windows.terminal_services)
  • Restricting users from running applications on Win2k3 Terminal Server
    ... What is the best way to restrict users from running certain applications ... on Win2k3 Terminal Server? ... I mostly just want to segregate between domain users and domain admins ...
    (microsoft.public.windows.server.general)
  • best method to restrict application execution on terminal servers
    ... What is the best way to restrict users from running certain applications ... on Win2k3 Terminal Server? ... I mostly just want to segregate between domain users and domain admins ...
    (microsoft.public.windows.server.active_directory)
  • Re: Domain Users cant execute applications on SBServer
    ... execute the program on the Terminal Server. ... the domain user logon workstation have administrator permission ... Add the domain users group to Terminal Server local Administrators group: ...
    (microsoft.public.windows.server.sbs)
  • Re: Domain Users cant execute applications on SBServer
    ... Addind Domain Users to the Administrators on the Terminal Server ... I copied the application executable to the Terminal Server ... but that they can execute the application if initiated from ... the domain user logon workstation have administrator permission ...
    (microsoft.public.windows.server.sbs)