Lockdown desktop

[Guy]

Hi,

I want to setup my terminal server to use a common
standard desktop for all my users. They should not receive
any roaming profile except their default printer. I heard
it can be set via Active Directory using GPO but can't
find any documentation on how. If you have a link,
appreciate if i can be directed or any recommendation for
those who did it before.

Thks,
Guy

 

[Vera Noest [MVP]]

You can apply a Group Policy which uses redirection of the
users Desktop, Start menu, Program Folders, etc, and to redirect
them to a custom Desktop folder and Start Menu which contains only
the items you want them to see.

278295 - How to Lock Down a Windows 2000 Terminal Services Session
http://support.microsoft.com/?kbid=278295

260370 - How to Apply Group Policy Objects to Terminal Services
Servers
http://support.microsoft.com/?kbid=260370

231287 - Loopback Processing of Group Policy
http://support.microsoft.com/?kbid=231287

I would recommend to combine this with roaming profiles. Saves you
lots of trouble when you add a second Terminal Server. Just define
a TS specific profile path on a network share in the User Account
properties of AD.

 

[Guy]

-----Original Message-----
You can apply a Group Policy which uses redirection of the
users Desktop, Start menu, Program Folders, etc, and to redirect
them to a custom Desktop folder and Start Menu which contains only
the items you want them to see.

278295 - How to Lock Down a Windows 2000 Terminal Services Session
http://support.microsoft.com/?kbid=278295

260370 - How to Apply Group Policy Objects to Terminal Services
Servers
http://support.microsoft.com/?kbid=260370

231287 - Loopback Processing of Group Policy
http://support.microsoft.com/?kbid=231287

I would recommend to combine this with roaming profiles. Saves you
lots of trouble when you add a second Terminal Server. Just define
a TS specific profile path on a network share in the User Account
properties of AD.

--
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
http://hem.fyristorg.com/vera/IT
--- please respond in newsgroup, NOT by private email ---


.
Thanks for the valuable information. Cheers, Guy