Re: Disconnecting & Forcing Logoff

Just configure redirection of the Start Menu and the Desktop to
custom folders, and make those read-only.

_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

compsosinc@xxxxxxxxx wrote on 04 mar 2008 in
microsoft.public.windows.terminal_services:

On Mar 4, 5:00 pm, "Vera Noest [MVP]" <vera.no...@remove-
this.hem.utfors.se> wrote:
The "explain" text says:

"Note: This setting does not apply to console sessions such as
Remote Desktop sessions with computers running Windows XP
Professional."

which means that the time-out settings don't work when you
connect *to* an XP host, or to the console session of a 2003
server. For normal sessions to your TS, the time-out will work.

_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting:  http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

compsos...@xxxxxxxxx wrote on 04 mar 2008 in
microsoft.public.windows.terminal_services:



On Mar 4, 3:06 pm, "Vera Noest [MVP]" <vera.no...@remove-
this.hem.utfors.se> wrote:
comments inline

compsos...@xxxxxxxxx wrote on 04 mar 2008 in
microsoft.public.windows.terminal_services:

1. Is there a way to disable a user's ability to
disconnect (using the X on the RDP connection) from a
session and to force them to logoff without following this
procedure below:

http://terminal.servebeer.com/php/x_box_disable.php

For instance, can the "X" be disabled or if they click it,
can their session be "instantly" reconnected.

The AppScape Lockdown Utility disables the
X-boxhttp://www.dabcc.com/ThinS
ol/Downloads/default.htm

The only other approach is to configure your server to
immediately reset disconnected sessions, but that can cause
data loss if users disconnect while they have unsaved data
in the session.

2. In our particular situation, our Terminal Server users
(note, we have 1 generic user account/machine that need
identical settings) & they do not need to use their local
XP workstation for anything else. Currently, if they have
to reboot their workstations, they get the CTRL +ALT+DEL
to login to the domain. Once they login, a saved an .RDP
file in the User's Startup folder connects them to the
Terminal Server. Not sure of another way....

A hardware or software thin client would be the other way to
go. Check Patrick's
website:http://www.sessioncomputing.com/thin-clients.htm

3. Once they connect to the TS, we would like a particular
program to open. Is this best configured in the Group
Policy or in the TS Profile of the User account? We have a
Group Policy created to lockdown the TS (in its own OU).

A GPO is *always* best! You only have to make the
configuration in one place, and you are already setup for
when you add a second TS.

4. We only want (1) program shortcut icon on the desktop
in case they close the program and have to reopen it. Is
it possible to prevent deletion of this shortcut, OR if it
is deleted, have only it on the Start Menu (not using
Classic) where it cannot be deleted? Then, if they
reconnect the desktop icons come back. We have read about
Folder Redirection, mandatory profiles, roaming profiles,
default profiles, etc but seem to need guidance on the
best method to use.

You can just put the shortcut on the All Users Desktop if it
isn't already there and make it read-only.
But note that if you define a Starting application, users
will never see the desktop, the session will logoff as soon
as they exit the application.

Thanks so much

You're welcome!
_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting:  http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

Concerning resetting the connection when a user disconnects
instead of logging off. We are going to keep the X on the RDP
connection. However we are looking through the GP for
resetting the disconnected session under User Config> Admin
Temp>Wind Comp> Term Serv> Sesssions:  "set time limit for
disconnected sessions". Is this where --it explains that this
cannot be used with WindowsXP RDP??- Hide quoted text -

- Show quoted text -

Setting "read-only" for the Shortcut on the TS desktop within
the "All Users" folder is not preventing the user from deleting
it. Should we set Security permissions on the All Users\Desktop
folder instead?

Also, in case we cannot figure out how to prevent them from
deleting the shortcut, we would like to provide a way for them
to click on it within the Start Menu -either as Pinned program
or on the "All Programs" list -- we have removed this in the GP
however. I think if we coud get Folder Redirection to work , or
a default profile, it would solve these issues. The last time we
tried Folder Redirection we messed it up and went back to the
drawing board, but if it is the best way to do this and give us
the best flexibility with providing future shortcuts/apps in the
future we shold just learn the proper way to do things.
Currently the TS Users see just "Printers & Faxes", Windows
Security & Logoff on the Start Menu (non-classic). Please advise
& thanks...
.

Relevant Pages

  • Re: Folder Redirection & Permission Questions
    ... folder called 'Desktop' ... Users' folder on the Terminal Server. ... Folder Redirection> Desktop to: ... Another update...if we choose a program shortcut from Microsoft ...
    (microsoft.public.windows.terminal_services)
  • Re: Users can not delete their documents
    ... I have to log onto Terminal Services Manager and log off the session ... What specific settings did you use for folder redirection of My ... The Group Policy redirects the Profiles to D:/Profiles the permissions ...
    (microsoft.public.windows.terminal_services)
  • Re: Program not available at Logon
    ... Folder redirection was exactly what I wanted, but I have one other issue. ... If *all* users of the TS should get this shortcut, ... MCSE, CCEA, Microsoft MVP - Terminal Server ...
    (microsoft.public.windows.terminal_services)
  • Right click problem for terminal server users
    ... This happens to everyone as I said, including administrators. ... thought it might be tied into a "My Documents" folder redirection policy they ... the whole session freezes until I end task on explorer.exe ... This only happens in the terminal server sessions ...
    (microsoft.public.windows.server.general)
  • Re: shortcuts in the desktop
    ... between shortcuts and real files. ... User Configuration - Windows Settings - Folder Redirection ... MCSE, CCEA, Microsoft MVP - Terminal Server ...
    (microsoft.public.windows.terminal_services)