How to setup Limited Desktop for all user except admins

  • Thread starter Thread starter ghill63
  • Start date Start date
G

ghill63

I have a terminal server that is NOT part of a domain.
It is just setup on a simple LAN.
I would like to limit the desktop so that anyone who is not an
administrator can only double click the available icons.

They can not right click or change their desktop in any way.
The start button will not show all the installed programs.

I know this is possible because I have logged into a Terminal Server
that was configured this way one time in the past.

The question is how the hell do I do it?

I heard that some how an administrator locked himself out of the admin
account. I don't want to do this in some inadvertant way.

Thank you in advance.

Greg Hill
 
Hi,

I have a terminal server that is NOT part of a domain.
Click to expand...

Forget it ... :-( Not really easy to deal with it.

You have to work with gpedit.msc and NTFS permissions as well
and deny the reading of the *.pol Files, after creating it
and prior to the first login of an Administrator.
http://support.microsoft.com/default.aspx?scid=kb;en-us;274478

Another option is to work with poledit.exe (old style system
policies and import the new ADMs)
And change the path, where the client will find the *.pol file,
because of the missing NETLOGON
[HKLM\System\CurrentControlSet\Control\Update]
"UpdateMode"=0x00000002
"NetworkPath"="x:\path\nameoffile.pol"

Implementing Policies and Profiles for Windows NT 4.0
http://www.microsoft.com/ntserver/techresources/management/prof_policies.asp
http://www.microsoft.com/ntserver/docs/prof_policies.doc

The last idea I have is to work with the
Microsoft Shared Computer Tool Kit
http://www.microsoft.com/windowsxp/sharedaccess/default.mspx
http://www.microsoft.com/windowsxp/sharedaccess/resources.mspx

Not as powerful as GroupPolicy, because the only use a few settings
from the existing ADMs, but worth a try.

Mark
 
Back
Top