Re: How to launch program only for certain group>
- From: "Justin Brown - SYNACS" <jcbrown@xxxxxxxxx>
- Date: 29 Jan 2007 11:10:02 -0800
Since you don't have Active Directory to help, how about adding the
shortcut to "%allusersprofile%\Start Menu\Programs\Startup" and then
edit the shortcut Properties -> Security tab changing the permissions
to allow "Read and Execute" for only the group you want. It's
imperfect, but might just work.
A) It applies to all sessions, not just TS. Shouldn't be a problem
though if your TS users login *only* via TS.
B) Server would attempt to execute the shortcut on every user logon,
and (after properly adjusting the "Read and Execute" permission) would
fail to load the shortcut for non-members of that group. Just make
sure to remove permission inheritance on the shortcut, and then
uncheck Read and Execute for Administrator and other accounts.
Maybe?
On Jan 29, 10:54 am, "C17" <c...@xxxxxxxxxxxxxxxx> wrote:
Thanks for the responses everyone!
(1) This particular TS server is not within an AD domain, so GPMC doesn't
apply unfortunately. Seems like a great tool.
(2) I tried putting IfMember into a batch file, as follows:
==================
@REM Launch MyProgram except if Administrator
@"c:\Program Files\Resource Kit\ifmember.exe" Administrators
@if errorlevel 1 GOTO DONE
@REM Notice that the syntax here is the opposite to normal in that
%ERRORLEVEL% = 1 = Success.
@REM With most other commands %ERRORLEVEL% = 1 = Fail/Error
"c:\program files\MyProgram\MyProgram.exe"
:DONE
==================
I then designate this batch file run by using the Group Policy Editor on the
TS Server:
User Configuration/Admin Templates/Windows Components/Terminal Services,
policy "Start a program on connection". Problem is, for an Administrator,
the
Problem is, TS will terminate the session right after the batch file runs --
which, in the case of the Administrator, terminates the session right away
(instead of dumping the user to the desktop)! I guess I should have
foreseen this; obvious in hindsight.
(3) I think I can now sharpen the issue. The TS group policy to "start a
program on connection" has two very desirable behaviors (in my situation
anyway)
a) It does not let the user get to the TS desktop and do random stuff
b) When the user exits the program, the TS session terminates
automatically
BUT, it seems that (without GPMC), you can't customize these TS policies by
group.
On the other hand, if I just use a standard logon script to launch my
desired program for some users, I don't get (a) and (b) above.
I thank you for your suggestions so far, and I wonder if you have any more!
C17
"C17" <c...@xxxxxxxxxxxxxxxx> wrote in messagenews:1Zvuh.427$M9.118@xxxxxxxxxxxxxxx
Hi all,
Windows 2003 Server TS question. I would like to configure TS to launch a
certain program automatically for all users in a certain group, but NOT if
the administrator (or other non-group members) connect. I can't figure out
how to accomplish this, can some kind soul point the way?
Thanks!
C17
.
- Follow-Ups:
- Re: How to launch program only for certain group>
- From: Vera Noest [MVP]
- Re: How to launch program only for certain group>
- References:
- Prev by Date: Re: "Start program on connection": It isn't centered
- Next by Date: Can I unistall RDC6.0 and go back to old version?
- Previous by thread: Re: How to launch program only for certain group>
- Next by thread: Re: How to launch program only for certain group>
- Index(es):
Relevant Pages
|
