Allow only specific computers to access via Web TSAC

  • Thread starter Thread starter Arch Willingham
  • Start date Start date
A

Arch Willingham

Is there a way to only allow certain machines to log in via the Web terminal
server client?

Thanks,

Arch
 
You can restrict by IP address with a firewall, or by user at the Terminal
Server.

Rob
 
I am trying to prevent our home users from logging in via a WIN95/98/ME
computer (which eats a license). If I could figure out a way it to only
WIN2000 or WIN XP machines that would work too. Because some of the home
users come in via cable (with the ip address changing) I am not sure that
would work.

Arch
 
You can check the OS version in your login script and throw them
out (use the environment variable %OS% ).

Note: this is a bit clumsy, since it will throw them out *after*
they have received a client license. However, they should give up
after a couple of tries, especially if you display a message
telling them that they will not be able to connect how often they
try. Since their TS CALs then will expire after 52-89 days of not
being used, the TS CALs will be returned to the LS automagically
(provided that you run at least SP3 on the servers).
 
Dang good idea!!

Arch
Vera Noest said:
You can check the OS version in your login script and throw them
out (use the environment variable %OS% ).

Note: this is a bit clumsy, since it will throw them out *after*
they have received a client license. However, they should give up
after a couple of tries, especially if you display a message
telling them that they will not be able to connect how often they
try. Since their TS CALs then will expire after 52-89 days of not
being used, the TS CALs will be returned to the LS automagically
(provided that you run at least SP3 on the servers).

--
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
http://hem.fyristorg.com/vera/IT
--- please respond in newsgroup ---
Click to expand...
 
You could always use the TSVer.exe (which came with the
Windows 2000 Resource Kit). You could only allow certain
builds of the terminal services client to connect, and you
could give those specific builds to only those people you
allow to connect.

This is pretty hokey...but it might work.

-M
 
Back
Top