limiting access to terminal clients for server programs

  • Thread starter Thread starter Sue
  • Start date Start date
S

Sue

Hi,
We recently installed terminal services. We have a
single server, also our domain server. We would like to
limit the programs users see when the remote into the
server. We only need them to access one program. I need
information on where to go to set up the profile or
security so that they can not access the my computer icon
on the desktop. I have been able to lock access to
administrative tools, etc but can't seem to lock down the
my computer icon which gives them ability to open
add/remove programs, etc. Any help would be appreciated
on where to find the documentation we need to take care
of this problem.
Thanks.
Sue
 
You'll want to use folder redirection. I set up a similar TS environment
here. Adding a user to a group gives them access to different desktops. A
share on the TS's D: drive will contain the desktop icons/Start Menu they
will see.
MS support has documents about this.
Graham
 
You can define a starting application in TS Connection
Configuration.
The application will start automatically when users connect to the
TS, and when they exit the application, they will be logged of
from the server. They will never see the desktop.

Make sure that there is no way to spawn another process from your
application (like an external editor), otherwise the users still
have a way out of the application. Also see to it that you secure
your file system with NTFS permissions and that users don't have
elevated permissions, just the normal user rights.
 
Back
Top