Re: Force to use only one application after logon via RDP

Tech-Archive recommends: Fix windows errors by optimizing your registry

For problem 1 - on server side, you can open tscc.msc and set "Start the
program when user logs on" in the environment tab. Or you can set the group
policy "Start a program on connection". Does that help?
Not sure I completely understand the problem 2. If the application can not
run without admin privilege and you specify that application as startup
program, users who do not have permissions to use that applications may not
be able to use the remote sessions. However, these policies are not
necessarily restricted to start applications for users who have admin
privileges. Also, note that this policy just specifies the startup
application in the session. It does not restrict user to only one
application. User could always start task manager and use it to launch other
applications.

Hope that helps.

--
This posting is provided "AS IS" with no warranties, and confers no rights.


"Wx" <sciuscianebbia@xxxxxxxxx> wrote in message
news:1158741526.384923.254540@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Hi,

1st problem: I want to force a user working via RDP to use only one
application. No problem setting the startup application in the property
of the RDP connection, but the user can connet without using this
option, having "full" access on the server.

2nd problem: this application need administrative access to work (yes,
it sucks!) so, looking at the point n.1, it's very important to
limitate what the user can do.

My domain is based on Windows 2003 STD, the clients are Windows XP
machines.

I think that those points can be accomplished by using Policy; but
which?

Those policy are useful when applied to user who have administrator
privileges?


Many many thanks
Matteo

Sorry for the (maybe) bad english, but it's not my native language and
i'm still learning it :)



.

Relevant Pages

  • Re: Remote Client Configuration
    ... Thanks for quickly updates. ... Just as I know, if you only logon the domain with cache credential, the ... group policy will not be updates, instead it will use the old policy that ... dial up VPN connection to logon SBS domain once-in-a-while for the group ...
    (microsoft.public.windows.server.sbs)
  • Re: Force to use only one application after logon via RDP
    ... users who do not have permissions to use that applications may not ... be able to use the remote sessions. ... note that this policy just specifies the startup ...
    (microsoft.public.windows.terminal_services)
  • Re: 802.1x authentication for wireless issues w/ ISA 2004
    ... Access Policy, ... But I still wonder why it stops working if you stop IAS from ... IAS server in "New features for IAS" Can't remember how I got forwarded ... In the "connection request policies" The default policy there is fine but ...
    (microsoft.public.windows.server.sbs)
  • Re: 802.1x authentication for wireless issues w/ ISA 2004
    ... I do have the dial in permisions for the users in AD set to use the remote ... and to refer to the remote access policy. ... one place but part of it was in the Accepting a connection article. ... But I still wonder why it stops working if you stop IAS from ...
    (microsoft.public.windows.server.sbs)
  • Re: Group Policy Errors
    ... Apply Group Policy permission on Default Domain Controllers Policy ... Computer GPO 'Internet Related - General Policy' NOT accessible Managed ... Cross Forest User Policy and Roaming Users Profile Cross Forest User ... an individual data segment (not connection request segments) before aborting ...
    (microsoft.public.windows.server.sbs)