Re: Create session two apps no shell (start menu...)



No problem, you can do that as well with GPOs and security
filtering.
Read all the details here:

How can I configure different TS desktops, based on user group
membership?
http://ts.veranoest.net/ts_faq_configuration.htm#desktopredirection
_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

=?Utf-8?B?aW52YW50aXg=?= <invantix@xxxxxxxxxxxxxxxxxxxxxxxxx>
wrote on 12 aug 2008 in
microsoft.public.windows.terminal_services:

I only want to do this for a select group of users.

Also,

I found this article about a bunch of group policies that can be
set:
http://www.windowsecurity.com/articles/Windows-Terminal-Services-
Run-Single-Application.html


"Vera Noest [MVP]" wrote:

You can't completely get rid of the shell, but you can modify
it so that it doesn't contain much more than just the Start
Menu with the Logoff and Disconnect options.

The solution is Group Policies. Lock your server down completly
and - most important of all - redirect the users to a custom
desktop folder and custom Start Menu, which you make read-only.
You'll find the settings here:

User Configuration - Windows Settings - Folder Redirection
Application Data
Desktop
My Documents
Start Menu

And since these settings are User Configuration settings, you
will also need to use loopback processing of the GPO:

Computer Configuration - Administrative Templates - System -
Group Policy
"User Group Policy loopback processing mode" - "Replace"

Then link this GPO to the OU which contains the Terminal
Server.

FYI: you have to do this anyway, also with a single starting
application. It is very easy to get to a normal desktop from
within nearly every starting application. You should not
consider configuring a starting application a security feature.

_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

=?Utf-8?B?aW52YW50aXg=?= <invantix@xxxxxxxxxxxxxxxxxxxxxxxxx>
wrote on 12 aug 2008 in
microsoft.public.windows.terminal_services:

I have some thin client (Wyse) units with windows XP embeded.
When they boot they connect to a terminal services session.
I can set the session to start an application which has been
great. I now need to have two applications available to the
users but that means I cennot set a "run app on connection"
which in turn means they will have acces to the start menu...


I would like to launch two apps with no shell on connection.

Thanks
.



Relevant Pages

  • Re: GPO problems
    ... OK I understand Loopback, I don't think it will help. ... I have a Terminal Server user within his own seperate OU ... with his own GPO assigned to it. ... therefore no conflicting GPO settings. ...
    (microsoft.public.windows.group_policy)
  • Re: GPO problems
    ... > I have a Terminal Server user within his own seperate OU ... > "User Configuration" policies are applied (eg. ... > therefore no conflicting GPO settings. ... > it's SOM or Scope ...
    (microsoft.public.windows.group_policy)
  • Re: user settings not applied to computers in ou?
    ... The user configuration portion of a GPO only applies to users who are in the ... OU heirarchy to which the GPO is linked. ... This is it's SOM or Scope ... The computer configuration settings from this list are applied to the ...
    (microsoft.public.win2000.group_policy)
  • Re: Help with configuration
    ... But now, aside from that, it is not applying any of the settings ... created the GPO on the 2000 server originally. ... I have the Terminal Server computer object in the security ... the domain account profile is blank, ...
    (microsoft.public.windows.terminal_services)
  • Re: Help with configuration
    ... I will specify it on the folder redirect in the GPO. ... But now, aside from that, it is not applying any of the settings again! ... I have the Terminal Server computer object in the security list of the ... domain account profile is blank, ...
    (microsoft.public.windows.terminal_services)