RE: How to stop TS users seeing/using installed programs.



Redirect your users to a custom desktop and a custom Start Menu,
which only contains the applications they should run.
This is easiest done with a Group Policy, applied to the OU which
contains the TS:

User Configuration - Windows Settings - Folder Redirection
Desktop
Start Menu

Make sure to use "loopback processing" with the Replace option in
this GPO as well:

Computer Configuration - Administrative Templates - System - Group
Policy
User Group Policy loopback processing mode

Remove unneccesary applications from the Default user start Menu.
Use NTFS permissions on the file system to keep users out of areas
they should not have access to.

278295 - How to lock down a Windows Server 2003 or Windows 2000
Terminal Server session
http://support.microsoft.com/?kbid=278295
_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

=?Utf-8?B?QUo=?= <AJ@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote on 14 sep
2006 in microsoft.public.windows.terminal_services:

I'd like to know too.

"ThomasAJ" wrote:

My server has applications loaded that I do not want TS users
to see when they click on Start/All Programs; and I certainly
do not want them to use many of the installed programs.
--
Regards
Tom
.



Relevant Pages

  • Re: Setting up a single profile for multiple users?
    ... the applications that I want visible to the users into a start menu ... redirect the start menu on the Terminal Servers to that location. ... use the group policy object that turns off user portion ofthe Start Menu. ...
    (microsoft.public.windows.terminal_services)
  • Re: Group policy problem: can not assign or publish applications to us
    ... What I would try is to create a new Group Policy with the Software ... HOWEVER i can assign applications to computers. ... > either assign or publish applications through GPO to users it fails. ... The Group Policy client-side extension Software Installation ...
    (microsoft.public.windows.group_policy)
  • Re: Vista and Group Policy - What An Adventure!!!!!
    ... It sounds like you're saying that you used the "Redirect to the following location" option initially but that somehow it changed that? ... Script Group Policy Settings with the GPExpert Scripting Toolkit for PowerShell! ... looking at the setting it is: Basic: Redirect everyone's folder to the ... Create a folder for each user under the root path ...
    (microsoft.public.win2000.group_policy)
  • RE: Deploying Application
    ... had been trying to use the add applications wizard but that didnt' work, ... (running the the SBS 03 server I am also trying to deploy apps from). ... there something stupid I could be doing in my group policy that would prevent ... you name this new group policy object as Test. ...
    (microsoft.public.windows.server.sbs)
  • RE: Can we really block users from installing applications through Group policy?
    ... > applications including MS ones will need this. ... >> group policy to prevent user installs but it seems ... >> really block users from installing applications ... > "Meddle not in the affairs of dragons, ...
    (Focus-Microsoft)