Re: 2008 Questions

Define the application as the starting application in a Group
Policy, configure loopback processing of the GPO, and then make
sure that Administrators are not affected by the application, by
using security filtering.

User Computer Configuration - Administrative templates - Windows
Components - Terminal Services
"Start a program on connection"

Computer Configuration - Administrative Templates - System - Group
Policy
"User Group Policy loopback processing mode" - "Replace"

231287 - Loopback Processing of Group Policy
http://support.microsoft.com/?kbid=231287

816100 - How To Prevent Domain Group Policies from Applying to
Administrator Accounts and Selected Users in Windows Server 2003
http://support.microsoft.com/?kbid=816100
_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

=?Utf-8?B?Um9i?= <Rob@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote on 28 apr
2008 in microsoft.public.windows.terminal_services:

I have a couple of questions:

1. I would like to set up an auto login link for terminal
services. I have an app that I want to run but have the server
locked down so that only the app can be run. I know I can set it
up in TS Configuration but it prevents me from logging in under
my own credentials for admin purposes. Is there another way I
can set it up? I've also tried saving the credentials in the
link but it doesn't stick. I would love to use RemoteApp but it
just isn't feasible at this time.

2. When logging in with the restricted user, the various 2008
splash screens come up. Is there a way to eliminate them?
.

Relevant Pages

  • Re: administrator locked out of SBS 2003
    ... Restriction Policies node and select New Software Restriction Policy ... Select "All users except local administrators" ... This is a known issue when installing VMware server 2.0, ... the installation kept ...
    (microsoft.public.windows.server.sbs)
  • Re: administrator locked out of SBS 2003
    ... This is a known issue when installing VMware server 2.0, ... Deleting a policy does not necessarily undo the settings that were ... selected "applies to all users except administrators" That allowed ...
    (microsoft.public.windows.server.sbs)
  • Re: administrator locked out of SBS 2003
    ... The Domain Admins group was a member of the Remote Operators ... My suspicion is that the policy change 'tattooed' the ... Select "All users except local administrators" ... That allowed the installation of VMware server to complete. ...
    (microsoft.public.windows.server.sbs)
  • Re: Restrict to 1 program
    ... Can I create the policy, apply it to the ... You can link a GPO to a site, or a domain, or an OU, and it will be ... MCSE, CCEA, Microsoft MVP - Terminal Server ... it doesn't apply to Administrators: ...
    (microsoft.public.windows.terminal_services)
  • Re: Assign Group Policy from 2000 server
    ... Yes, this is definitely possible, and you should use a loopback processing ... feature of the group policy to achieve this. ... Windows Server - Active Directory ... >computer account of W2k3 terminal server. ...
    (microsoft.public.windows.group_policy)