Re: installing MS Office 2003/2007 on TS Machines

Tech-Archive recommends: Fix windows errors by optimizing your registry

On Jul 7, 10:51 am, "Jeff Pitsch" <j...@xxxxxxxxxxxxxxxxxxxxxxxx>
wrote:
To use them properly yes. Why is the box in a workgroup? Novell in the mix
or something?

Jeff Pitsch
Microsoft MVP - Terminal Services

"jphallett" <jphall...@xxxxxxxxx> wrote in message

news:b9564a02-f560-48a4-b6a6-327dcd8626ac@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

On Jul 5, 7:53 am, "jolteroli" <jolt1...@xxxxxxx> wrote:
"Cary Shultz" <cshu...@xxxxxxxxxxxxxxxxxxxxxxxxxx> schrieb im
Newsbeitragnews:%23bRD17o3IHA.3624@xxxxxxxxxxxxxxxxxxxxxxx

Good moring!

I hope that all of you in the US had a great 4th of July (we did...but
the
little ones do not quite appreciate the Fireworks after bedtime!).

QUESTION: on a WIN2003 R2 SP2 Terminal Server we have, among other
things,
MS Office 2007 installed. Additionally, we installed MS Office Project
2007 (default location). I need to limit the users who are able to
make
use of MS Office Project 2007. Is this possible? Please read the
short
novel below to understand why I am asking this question....

SHORT NOVEL!!!!!!

I noticed on the Terminal Server that C:\Program Files has an "extra"
Security Group in the NTFS Permissions tab - "TERMINAL SERVER USERS".

I guess that is the relaxed/default security thingy. It seems the
TSUserEnabled dword is set to 1 under
"HKEY_LOCAL_MACHINE/SYSTEM/CurrentControlSet/Control/Terminal Server".
Can
you confirm this? For additional informations have a look to this
article:http://www.brianmadden.com/content/article/Understanding-Terminal-Ser...

I have to admit that I have never noticed that before. I remoted into
three or four TS Boxes at different clients and lo and behold! All of
them have that!

I do not see this Security Group anywhere in Active Directory so
*assume*
that it is a TS specific thing...can anyone shed a light on this for
me?
I will admit that I have not used ldifde to enummeeate all of the
objects
in AD so I would not necessarily be surprised to find it tucked
away....

The true reason for this post, as already mentioned, is that I want to
limit one of the MS Office 2007 applications (MS Office Project 2007)
to a
specific group of users. I have the Security Groups already set up
(Universal Security Group containing the user account objects and then
a
Local Security Group on the TS box...I made the USG a member of the
LSG).
I do not want to remove the "Terminal Server Users" security group
(essentially, replace that with the LSG) on the executable
(WINPROJ.exe)
as I do not want to mess things up.

We create local groups like "app.office14.project", and put the user in
the
group. Local groups, because each TS is very special here. On the file in
question "WINPROJ.EXE" we break up the ntfs-inheritance (copy), remove
the
std. user groups and add the mentioned group. This way we enforce the
licensing and for example access via internet explorer to the internet.

-jolt

Does this work in a workgroup environment? I have been trying to
figure out how to restrict certain users from using specific apps.
Everything I have read on Software Restriction Policies you have to be
in an AD to use them.

Jeff

Hi Jolt,
yes my TS is in a workgroup environment not an AD. Your solution with
the local groups seems like it might work. Is there information on it
posted somewhere that you could direct me to?

Thanks
Jeff
.

Relevant Pages

  • Re: installing MS Office 2003/2007 on TS Machines
    ... we installed MS Office Project ... Security Group in the NTFS Permissions tab - "TERMINAL SERVER USERS". ... Local groups, because each TS is very special here. ... Everything I have read on Software Restriction Policies you have to be ...
    (microsoft.public.windows.terminal_services)
  • installing MS Office 2003/2007 on TS Machines
    ... we installed MS Office Project 2007 ... Security Group in the NTFS Permissions tab - "TERMINAL SERVER USERS". ...
    (microsoft.public.windows.terminal_services)
  • Re: installing MS Office 2003/2007 on TS Machines
    ... on a WIN2003 R2 SP2 Terminal Server we have, ... I do not see this Security Group anywhere in Active Directory ... We create local groups like "app.office14.project", ... This way we enforce the licensing and for ...
    (microsoft.public.windows.terminal_services)
  • Re: installing MS Office 2003/2007 on TS Machines
    ... Jeff Pitsch ... Security Group in the NTFS Permissions tab - "TERMINAL SERVER USERS". ... Local groups, because each TS is very special here. ... Does this work in a workgroup environment? ...
    (microsoft.public.windows.terminal_services)
  • Re: installing MS Office 2003/2007 on TS Machines
    ... on a WIN2003 R2 SP2 Terminal Server we have, among other things, MS Office 2007 installed. ... I need to limit the users who are able to make use of MS Office Project 2007. ... I do not see this Security Group anywhere in Active Directory so *assume* that it is a TS specific thing...can anyone shed a light on this for me? ... This way we enforce the licensing and for example access via internet explorer to the internet. ...
    (microsoft.public.windows.terminal_services)