RE: Researching TS for new setup

Hi Matt,

I'll try and give you a call today, if not, when on Monday will be a good
time to chat?

Amanda

"MattShell" wrote:

Wow Amanda,

That is a set of questions. Give me a call at 928-710-6142, as I think in
person might be better. I talk fast than I type. :)

Matt

"Amanda" wrote:

Hi Matt,

I've read your reply and the thread with you, Alex and Vera. Now, let me
recap what I got out of this to be sure I understand correctly:

Logon: In ADUC we set the account to only logon to the TS, meaning that if
our TS was named Moscow, we set it to that and the only option in the
pulldown menu on the logon screen will be Moscow. Will admin still have the
option to logon to the local computer?

Filtering of websites: There's hardware that will do that for us so we don't
need a program like Cybersitter to keep people from undesirable sites. How
is this pysically set up, as in where between the internet connection coming
into the building to the TS to the workstations does this hardware lay.
Also, how is the filtering setup? With CyberSitter we tell it what type of
sites, such as adult or social networking(myspace), to exclude. Is the
harware similar to this?

And after reading over things, I have more questions:

In our current set up, all of the PCs are stand alone and we use the same
account on each computer. We've done this so that if a guest stops a staff
memeber or calls the front desk b/c a computer isn't on or logged in, the
staff member can just say "yes the logon is this and the password is that.
(We also have it on the monitor but sometimes you can't see what's right in
front of you). Is this possible with TS?

Are we able to configure it so that the user has access to only x, y, z
programs and the internet and not places like network connections or control
panel?

Can we set it so that they cannot save something to anything but removeable
media like a jump drive?

If I've got this right, to do TS, we need Win Server 2003 with active
directory (since we use ADUC to limit what computer the user logons to) and
CALS for the number of devices running the Office product (regardless of how
many computers are using the program at the same time).

What other CALS do we need?

Does IE need CALS?

Is there a particular version of Server 2003 to use?

Is there any special hardware or software needed for the workstations?

Can this be setup so that two locations, Hotel A and Hotel B which are
physically seperated by another building, a road and a stream, run off the
same TS? What performance degradation would we possibly see if we can do
this?

How does anti-virus work in a TS setting?


And I think that's it.... for now.

Thank you so much for any answers you can provide.

Amanda


"MattShell" wrote:

As far as the log on is concerned check this post
http://www.microsoft.com/technet/community/newsgroups/dgbrowser/en-us/default.mspx?&query=MattShell&lang=en&cr=US&guid=&sloc=en-us&dg=microsoft.public.windows.terminal_services&p=1&tid=aa22a65e-f01b-4c2d-9ef4-4d419d6d0d02&mid=aa22a65e-f01b-4c2d-9ef4-4d419d6d0d02

Ignore what I say and read what Vera said as I misunderstood what Alex was
trying to accomplish. It appears that Alex was trying to do the same thing
you are trying to do and has not written back since the 23rd, so the
assumption is that it worked.

As far as everything else goes, TS is perfect for what you are trying to do.
Although I would go with some hardware filtering outside of the machine as
it cannot be disabled at the session, and I am not sure how Cybersitter works
in TS, although that question could be asked as well.

Matt

"Amanda" wrote:

I'm needing help researching TS.

Here's what we have: I work for a hospitality company. In our current
hotel, we have five stand-alone computers for guests to use. Three are in a
business center setup as a workgroup with MS Office applications, internet
connection and printing via a local printer. We have two additional
computers on another floor that have internet access, no productivity
software or printing. All computers have Cybersitter to restrict access to
certain websites as well as certain areas of the computer, like the control
panel. Also, we use Deep Freeze so that if anything does get changed, we
just restart the computer and it goes back to the our settings. However, if
I have to do anything, like update the anti-virus or Windows, I have to
physically touch the computers, which, depending on what needs to be done,
can take a good chunk of time.

Here's what we're trying to accomplish: The same setup as above, with at
least double the number of computers, and using a solution that will make it
very easy to update and maintain the computers without having to go and
physically touch each computer. When discussing TS with my boss, he said one
of the things that we need to be sure happens is that when a computer is
restarted, it goes straight to TS.

I know very little about TS, I'm just getting started in this field, so any
help I can get will be greatly appreciated.

Thanks for any replies.


.

Relevant Pages

  • RE: Researching TS for new setup
    ... I've read your reply and the thread with you, Alex and Vera. ... Logon: In ADUC we set the account to only logon to the TS, ... as in where between the internet connection coming ... Can this be setup so that two locations, Hotel A and Hotel B which are ...
    (microsoft.public.windows.terminal_services)
  • RE: Researching TS for new setup
    ... "Amanda" wrote: ... Logon: In ADUC we set the account to only logon to the TS, ... as in where between the internet connection coming ... Can this be setup so that two locations, Hotel A and Hotel B which are ...
    (microsoft.public.windows.terminal_services)
  • RE: Researching TS for new setup
    ... Wow Amanda, ... Logon: In ADUC we set the account to only logon to the TS, ... as in where between the internet connection coming ... Can this be setup so that two locations, Hotel A and Hotel B which are ...
    (microsoft.public.windows.terminal_services)
  • Re: Event id 529
    ... I guess these are infected win boxes on the internet doing scans for other vulnerable boxes and trying to login with some standard/random usernames/passwords. ... Of course, you could do that with any sniffer/packet capturing tool like Ethereal or Network Monitor, but I think as a first step windows firewall would be easier to use. ... Event Type: Failure Audit ... Logon Failure: ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Event id 529
    ... The machines are not accessible from the Internet. ... I don't have access to my Network ... Logon Failure: ...
    (microsoft.public.windowsxp.security_admin)