Locking down 2003 TS

  • Thread starter Thread starter M$
  • Start date Start date
M

M$

Does Server 2003 have the ability to be locked down so that a TS user cannot
install any software from the internet without administrative rights?
Specifically spyware and adware like Hotbar which is a IE toolbar.

I run Win2000 TS, but have not found an effective way to prevent any and all
installation of software, 100%, by users and I'm wondering if 2003 is able
to do that?

Is there a Win2003 Server NG? I could not find one on Microsoft NG.

Thanks.
 
This is the best newsgroup to use. The name could be better, but oh
well.

The Terminal Services FAQ at:
http://www.microsoft.com/windows2000/community/centers/terminal/terminal_faq.mspx
says the following:

Q. How do I "lock down" my terminal server?

A. For Windows 2000 Server, see David Mackey's Securing Windows 2000
Terminal Services
http://www.microsoft.com/technet/tr...echnol/win2kts/maintain/optimize/secw2kts.asp
white paper.

For Windows Server 2003 and Windows XP, you can restrict what software
users can run on the server. See Using Software Restriction Policies
to Protect Against Unauthorized Software
http://www.microsoft.com/windowsxp/pro/techinfo/administration/restrictionpolicies/
and Locking Down Windows Server 2003 Terminal Server Sessions
http://www.microsoft.com/downloads/...ff-9a6e-40c7-b64e-7920e6ae6a0d&DisplayLang=en
..



Does Server 2003 have the ability to be locked down so that a TS user cannot
install any software from the internet without administrative rights?
Specifically spyware and adware like Hotbar which is a IE toolbar.

I run Win2000 TS, but have not found an effective way to prevent any and all
installation of software, 100%, by users and I'm wondering if 2003 is able
to do that?

Is there a Win2003 Server NG? I could not find one on Microsoft NG.

Thanks.
Click to expand...



This posting is provided "AS IS" with no warranties, and confers no rights
 
Thanks for the reply.

Could you or some one else tell me if server 2003 is also able to prevent TS
users from installing any software especially of the internet. I saw that
2003 has the ability to control who runs what, but could not see anything
that would allow me to revoke a user's ability to install software of the
Internet. Did I miss that in the documentation?

I have a situation where the TS users need Internet access to do their jobs,
but I want to completely eliminate their ability to install any software,
especially IE menu bars like Hotbar which are very sneaky/deceptive, etc.
i.e.. I want the users to be able to surf the web but have 0 abilities to
download/install anything - no exceptions except for administrators.

Thanks.
 
You should look into IE security zones. You can block ActiveX
download and file download and such.

Thanks for the reply.

Could you or some one else tell me if server 2003 is also able to prevent TS
users from installing any software especially of the internet. I saw that
2003 has the ability to control who runs what, but could not see anything
that would allow me to revoke a user's ability to install software of the
Internet. Did I miss that in the documentation?

I have a situation where the TS users need Internet access to do their jobs,
but I want to completely eliminate their ability to install any software,
especially IE menu bars like Hotbar which are very sneaky/deceptive, etc.
i.e.. I want the users to be able to surf the web but have 0 abilities to
download/install anything - no exceptions except for administrators.

Thanks.
Click to expand...

This posting is provided "AS IS" with no warranties, and confers no rights
 
Back
Top