Re: single start menu, desktop for everyone but administrator

Tech-Archive recommends: Fix windows errors by optimizing your registry

OK, I found the advice to fix this little problem here:
http://technet2.microsoft.com/WindowsServer/en/library/e88aba03-65b7-4084-a8ef-eb4ca907fe921033.mspx?mfr=true

However, it still does not show up when I register that DLL.

"Terry" wrote:

Weird, I don't have a "Folder Redirection" under there. Is it something else
I have to install?

"Vera Noest [MVP]" wrote:

That's here:

User Configuration - Windows Settings - Folder Redirection
Application Data
Desktop
My Documents
Start Menu
_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

=?Utf-8?B?VGVycnk=?= <Terry@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote on 18
okt 2006 in microsoft.public.windows.terminal_services:

Can you be more specific with the "redirect the desktop to a
customized desktop
folder" part? I am unable to find this in GPO.

"Vera Noest [MVP]" wrote:

Sorry, I missed that info in your first post.
Yes, that complicates matters.
KB 816100 has a link to this article:

293655 (http://support.microsoft.com/kb/293655/) How to apply
local policies to all users except administrators on Windows
2000 in a workgroup setting
http://support.microsoft.com/?kbid=293655

but the solution given there is not very practical.
I would try this: use a local policy (with gpedit) to lock down
your server and redirect the desktop to a customized desktop
folder. These settings will apply to everyone.
Create a folder in the customized desktop folder, let's call it
AdminTools, and copy your current start menu and desktop
shortcuts to this folder. Use NTFS permissions to make the
folder accessible for Administrators only.
_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

=?Utf-8?B?VGVycnk=?= <Terry@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote on
18 okt 2006 in microsoft.public.windows.terminal_services:

Thank you for your reply. Your advice on #3 seems to only
apply to domain groups policies. This is a standalone
machine, no domain involved.

"Vera Noest [MVP]" wrote:

#1 : Use the GPO to redirect users to a custom desktop
folder, in which you put your shortcuts. Make this folder
read-only.

#3 : Use security filtering of the GPO.
816100 - How To Prevent Domain Group Policies from Applying
to Administrator Accounts and Selected Users in Windows
Server 2003 http://support.microsoft.com/?kbid=816100

_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

=?Utf-8?B?VGVycnk=?= <Terry@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote
on 18 okt 2006 in
microsoft.public.windows.terminal_services:

I have a terminal server that I want to do a few things
with.
It is not part of AD. There are about 10 users that will
need access to this server. I only want them to be able
to have a couple of icons on the desktop and for them to
be able to use only those applications. So here are my
goals:

1) All users have same exact desktop
2) All users have 1 thing in start menu (log off)
3) Administrator settings, desktop, start menu stay
unchanged

I have #2 kinda working but it removes everything for the
admins too. I am trying to achieve #2 through the group
policy editor but like I said, its changing EVERYONE's
settings. I am not having any success in #1. Please
help.

.

Relevant Pages

  • Re: 2003 Terminal Server Profiles How too..
    ... I moved the Terminal Server Computer object into the OU. ... If both settings are configured, ... Then use Folder redirection to redirect the Desktop folder ... Within the test user under Terminal Services Profile ...
    (microsoft.public.windows.terminal_services)
  • RE: tighten security...question for Patrick Rouse
    ... Full Control (This Folder, ... let you logon interactively with an admin account, ... >Microsoft MVP - Terminal Server ... > C:\Program Files directories with Administrators, ...
    (microsoft.public.win2000.termserv.apps)
  • Re: Help with configuration
    ... to redirect their My Documents folder to a share on the fileserver. ... GPo, if it is already redirecting by default? ... account profile is blank, also). ... Your GPO settings do not apply to your Terminal Server. ...
    (microsoft.public.windows.terminal_services)
  • Re: Word 2007 on term session - "Word could not create the work fi
    ... that the Temporary Internet Files folder is stored in C:\WINDOWS. ... MCSE, CCEA, Microsoft MVP - Terminal Server ... User environment variables match on both ... you might have to update/add the shadow key in the ...
    (microsoft.public.windows.terminal_services)
  • Re: single start menu, desktop for everyone but administrator
    ... User Configuration - Windows Settings - Folder Redirection ... MCSE, CCEA, Microsoft MVP - Terminal Server ... TS troubleshooting: http://ts.veranoest.net ...
    (microsoft.public.windows.terminal_services)