RE: Windows 2003 Server Terminal Services
- From: Tim <Tim@xxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Thu, 29 Jun 2006 11:50:01 -0700
I think he meant to use NTFS to block access to the programs and not to limit
the task manager. For instance you could deny access to Outlook through NTFS
for users that you did not want using Outlook. Vera please correct me if I
am mistaken.
"Mafi Osori" wrote:
Vera,.
I tried the first .bat idea, and though it worked, it left the batch file
open behind the screen, so one could just close it and stop the logout
process.
I tried the .vbs idea and it was better. I had to add "wscript blah.vbs" to
the "start a program on connnection" policy because without the "wscript" I
got an error 193.
All that's left is to remove access to the task manager, which I'll try
throught ntfs, but that seems like a dangerous road. :)
Any other ideas?
Thanks again so far.
-Mafi
"Vera Noest [MVP]" wrote:
Use NTFS permissions on the file system to keep users from
accessing applications which they should run. Or use Software
Restriction Policies:
http://www.microsoft.com/technet/treeview/default.asp?
url=/technet/prodtechnol/winxppro/maintain/rstrplcy.asp
To log users off:
Create a batch file, containing something like this:
cd <path_to_the_folder_containing_your_application>
start /wait <application_executable>
logoff
Now define this batch file as the starting application.
Or use the following vb script to launch your application, and
define the vb script as the starting application.
Dim objWshShell, objExec, strAppExe
strAppExe = "<path_to_the_folder_containing_your_application>
\<application_executable>"
Set objWshShell = CreateObject("WScript.Shell")
Set objExec = objWshShell.Exec(strAppExe)
Do While objExec.Status = 0
WScript.Sleep 500
Loop
Set objExec = objWshSHell.Exec("logoff")
_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___
=?Utf-8?B?TWFmaSBPc29yaQ==?= <MafiOsori@xxxxxxxxxxxxxxxxxxxxxxxxx>
wrote on 28 jun 2006 in
microsoft.public.windows.terminal_services:
I should add that I don't mean how do I write code to logoff
from within my program.
I mean, given program X that starts when someone logs in, how do
I force a logout when program X exits.
"Mafi Osori" wrote:
I thought I had seen it before. I thought Application Server
mode in the 2K Server had that ability.
I tightened the server down some, so it loads a program I wrote
after logon (using group policy).
I also disabled showing the desktop.
How do I initiate a logoff as soon as they close my program?
How do I disable their ability to press cntl+alt+del to get the
Windows Security screen? They can launch any program from
there.
Thanks.
"Tim" wrote:
I do not think this is a current functionality of Terminal
Services but it can be done with 3rd party tools or maybe
using Group Policy to limit which applications users can
execute.
Will someone please correct me if I have giving false
information.
"Mafi Osori" wrote:
Can I setup the terminal server to only serve a list of
applications I choose?
I have Windows 2003 Server Standard Edition with the
Terminal Server role and the Terminal Services Licensing
installed.
Everything is setup so that users can log in and get a full
desktop session.
What I really would rather is a list of applications they
can run, and
nothing else.
- References:
- RE: Windows 2003 Server Terminal Services
- From: Vera Noest [MVP]
- RE: Windows 2003 Server Terminal Services
- From: Mafi Osori
- RE: Windows 2003 Server Terminal Services
- Prev by Date: Backup License Server
- Next by Date: Re: Access terminal server from internet by proxy
- Previous by thread: RE: Windows 2003 Server Terminal Services
- Next by thread: Unexpectedly Sessions Dropped
- Index(es):
Relevant Pages
|
