Lock Down Thin Clients

  • Thread starter Thread starter Andrew
  • Start date Start date
A

Andrew

I have 2 thin clients that will be controlled by the main
server and I have connected everything right. When the
thin client connects to the server it brings up the
standard Windows Logon screen and I can log onto the
server. However, I can't choose what programs this thin
client will be able to access. I do not want the users
of the thin client to be able to access anything but
Internet Explorer and Microsoft Word. Is there a way to
limit these two stations to this?

Someone please help me!!!!

Andrew
 
Group Policy, AppSec tool from the Resource Kit, login script, NTFS
permissions, there are numerous ways to fix this.
What is best for you depends on your setup (OS version? AD domain or
not?) and if you want all users of these clients to be restricted
(i.e.restriction based on %clientname%), or only some users,
regardless of their location (restriction based on Group membership),
or a combination.
 
I am running Windows 2000 Server. All users of these
clients should only have access to Internet Explorer and
Microsoft Word (which are already installed on the server).
 
Mmm, you'll have to do some scripting then.
I think I would write a login script that checks for the
%clientname% variable and redirects users of these clients to a
special desktop folder that only contains an icon for IE and Word.
Not foolproof, but a good starter, I think.
You might also be able to do this with a GPO (possibly with a
custom administrative template), if you have an AD domain.

323639 - HOW TO: Create Custom Administrative Templates in Windows
2000
http://support.microsoft.com/?kbid=323639
 
If you want to lock down these users when they connect to the TS, no matter
if they connect using these thin clients or their own PCs using the RDP
client (Win32 or ActiveX), create a group policy for the TS that applies to
a group where you will have all these users.
Then redirect the Start Menu and the Desktop to a file server where you will
have only the menu/shortcuts you want.
This will lock them down exactly as you want.

--
Cláudio Rodrigues

Microsoft MVP
Windows Technologies - Terminal Services
http://www.terminal-services.net
 
Back
Top