Re: 2008 Questions

Let me re-phrase. I want my terminal server locked down so users can't poke
around the server, surf the internet, that kind of thing. There are 3
different applications that they could run. I want users to auto login using
a specific user name but I want to be able to remote in as myself for
administration.

"Vera Noest [MVP]" wrote:

No. You wrote that you wanted the ".. server locked down so that
only the app can be run".
If your users need to run more than a single application, you don't
define a starting application.
_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

=?Utf-8?B?Um9i?= <Rob@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote on 28 apr
2008 in microsoft.public.windows.terminal_services:

Will this prevent the taskbar from showing? There are other
potential apps the users might be using and we want them to be
able to see the taskbar.

"Vera Noest [MVP]" wrote:

Define the application as the starting application in a Group
Policy, configure loopback processing of the GPO, and then make
sure that Administrators are not affected by the application,
by using security filtering.

User Computer Configuration - Administrative templates -
Windows Components - Terminal Services
"Start a program on connection"

Computer Configuration - Administrative Templates - System -
Group Policy
"User Group Policy loopback processing mode" - "Replace"

231287 - Loopback Processing of Group Policy
http://support.microsoft.com/?kbid=231287

816100 - How To Prevent Domain Group Policies from Applying to
Administrator Accounts and Selected Users in Windows Server
2003 http://support.microsoft.com/?kbid=816100
_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

=?Utf-8?B?Um9i?= <Rob@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote on 28
apr 2008 in microsoft.public.windows.terminal_services:

I have a couple of questions:

1. I would like to set up an auto login link for terminal
services. I have an app that I want to run but have the
server locked down so that only the app can be run. I know I
can set it up in TS Configuration but it prevents me from
logging in under my own credentials for admin purposes. Is
there another way I can set it up? I've also tried saving the
credentials in the link but it doesn't stick. I would love to
use RemoteApp but it just isn't feasible at this time.

2. When logging in with the restricted user, the various 2008
splash screens come up. Is there a way to eliminate them?

.

Relevant Pages

  • RE: Client Default Printer
    ... If a user can print fine from one some apps, but not one specific app, ... Microsoft MVP - Terminal Server ... The only Group Policy applied is the default domain ... > policy, the Default Domain controllers policy and the local policy. ...
    (microsoft.public.windows.terminal_services)
  • Re: Does Terminal Server Licensing turn off Remote Desktop for Adm
    ... Remote Desktop for Administration and Terminal Services, ... MCSE, CCEA, Microsoft MVP - Terminal Server ... > Terminal Server Licensing. ...
    (microsoft.public.win2000.termserv.apps)
  • Re: TermServ CAL issued to "Unknown" is locking one of my CALs!
    ... Administration mode behind you. ... license expires or buy another one. ... >> but a single Terminal Server can only use one type of licenses. ... >> Vera Noest ...
    (microsoft.public.windows.terminal_services)
  • Re: Disable Remote Desktop - Enable Terminal Services
    ... on me that the "Remote Desktop for Administration" statement tells me it is ... so installing Terminal Server on 2003 assumes ... >> terminal server mode: administration or application server. ...
    (microsoft.public.windows.terminal_services)
  • Re: Does Terminal Server Licensing turn off Remote Desktop for Adm
    ... Add and Remove Programs and left on Terminal Server Licensing. ... turned on Remote Desktop to allow for Remote Desktop for Administration. ... so I went into the Terminal Services ...
    (microsoft.public.win2000.termserv.apps)