RE: Disabling Administrative tools for TS user

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Matthew Harris [MVP] (harris_at_crocker.ucdavis.edu)
Date: 12/08/04 

Date: Wed, 8 Dec 2004 13:31:28 -0800

There isn't a group policy to control that, although you could just edit the
default user profile and remove it there. You could also apply NTFS
permissions on the administrative tools folder such that only you can access
it.

Not quite related, but I'd really suggest against giving any user
administrative permissions. I know you know this, but any user that wants to
goof around can and will hurt your system, inadvertantly or not. It is just
too risky. Isn't there any way you could run your application with fewer
permissions?

-M

"NJM" wrote:

> SBS 2003
>
> I have a particular application that requires any user running app via
> terminal services desktop to have administrator security. In order to limit
> whats available to the user on the desktop I have set up a separate OU, and
> set up a new group policy on this OU. I cannot however locate where I can
> disable access to ADMINISTATIVE TOOLS.
>
> Would appreciate if someone could point me in the right direction
>
> --
> NJM

Relevant Pages

  • RE: Disabling Administrative tools for TS user
    ... I have reverted to software supplier ... > permissions on the administrative tools folder such that only you can access ... >> terminal services desktop to have administrator security. ...
    (microsoft.public.windows.terminal_services)
  • Re: FTP problem with more than 2 users configured
    ... After this I ran Filemon and set it to filter on "inetinfo". ... I think you'll agree that file permissions are not the issue here. ... >> began after the installation of Exchange Server 2003. ... >> computer from the network' for other users with the Group Policy ...
    (microsoft.public.inetserver.iis.ftp)
  • RE: Error binding to local domain
    ... away because I was away for a couple weeks and I do not force permissions on ... The permissions dialog just times out trying to resolve the ... >> following event "Windows cannot query for the list of Group Policy objects. ... >> An Active Directory, network connectivity, or network configuration problem ...
    (microsoft.public.windows.server.sbs)
  • Re: Would like to lockdown public computer
    ... not have access to any shares for share permissions or ntfs permissions. ... Learn to use Group Policy. ... protect the cmos settings as it is easy to reboot a computer from a floppy ... the mandatory profile on the local computer and then have the users account ...
    (microsoft.public.win2000.security)
  • Re: Help with GPO problem! PLEASE!!
    ... Can you create a new GPO?? ... If so use it to compare permissions to the two ... > Configuration information could not be read from the domain controller, ... Failed to open the Group Policy Object. ...
    (microsoft.public.windows.group_policy)