RemoteApp vs. full Remote Desktop

[Blake]

I've read in some places where I can give a user access to a RemoteApp
WITHOUT giving them full remote desktop. I've also read the opposite.

Can I give someone the ability to use RemoteApp (Windows 2008 TS server,
obviously) without giving them the ability to actually log into a full
fledged deskop via RDP?

ie - I'd like to keep them off the desktop for security reasons.

Thanks
Blkae

 

[Jeff Pitsch]

Re: RemoteApp vs. full Remote Desktop

You can if you assign in their user account or gpo a dummy application
to start at logon. This will not affect the remoteapp capability but it
will prevent the user from starting a full desktop. run something like
logoff.exe or something like that and you are golden.

Jeff Pitsch
Microsoft MVP - Terminal Services

Blake wrote:
> I've read in some places where I can give a user access to a RemoteApp
> WITHOUT giving them full remote desktop. I've also read the opposite.
>
> Can I give someone the ability to use RemoteApp (Windows 2008 TS server,
> obviously) without giving them the ability to actually log into a full
> fledged deskop via RDP?
>
> ie - I'd like to keep them off the desktop for security reasons.
>
> Thanks
> Blkae
>
>

 

[Vera Noest [MVP]]

Re: RemoteApp vs. full Remote Desktop

But keep in mind that it is trivial to get to the full desktop (or
run any application) from within nearly every application.

_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

Jeff Pitsch <jeff.pitsch.fake@jeffpitschconsulting.com> wrote on
23 okt 2008 in microsoft.public.windows.terminal_services:

> You can if you assign in their user account or gpo a dummy
> application to start at logon. This will not affect the
> remoteapp capability but it will prevent the user from starting
> a full desktop. run something like logoff.exe or something like
> that and you are golden.
>
> Jeff Pitsch
> Microsoft MVP - Terminal Services
>
> Blake wrote:
>> I've read in some places where I can give a user access to a
>> RemoteApp WITHOUT giving them full remote desktop. I've also
>> read the opposite.
>>
>> Can I give someone the ability to use RemoteApp (Windows 2008
>> TS server, obviously) without giving them the ability to
>> actually log into a full fledged deskop via RDP?
>>
>> ie - I'd like to keep them off the desktop for security
>> reasons.
>>
>> Thanks
>> Blkae

 

[Blake]

Re: RemoteApp vs. full Remote Desktop

Thanks (to both of you)
Blake


"Vera Noest [MVP]" <vera.noest@remove-this.hem.utfors.se> wrote in message
news:Xns9B40F26FDA5D7veranoesthemutforsse@207.46.248.16...
> But keep in mind that it is trivial to get to the full desktop (or
> run any application) from within nearly every application.
>
> _________________________________________________________
> Vera Noest
> MCSE, CCEA, Microsoft MVP - Terminal Server
> TS troubleshooting: http://ts.veranoest.net
> ___ please respond in newsgroup, NOT by private email ___
>
> Jeff Pitsch <jeff.pitsch.fake@jeffpitschconsulting.com> wrote on
> 23 okt 2008 in microsoft.public.windows.terminal_services:
>
>> You can if you assign in their user account or gpo a dummy
>> application to start at logon. This will not affect the
>> remoteapp capability but it will prevent the user from starting
>> a full desktop. run something like logoff.exe or something like
>> that and you are golden.
>>
>> Jeff Pitsch
>> Microsoft MVP - Terminal Services
>>
>> Blake wrote:
>>> I've read in some places where I can give a user access to a
>>> RemoteApp WITHOUT giving them full remote desktop. I've also
>>> read the opposite.
>>>
>>> Can I give someone the ability to use RemoteApp (Windows 2008
>>> TS server, obviously) without giving them the ability to
>>> actually log into a full fledged deskop via RDP?
>>>
>>> ie - I'd like to keep them off the desktop for security
>>> reasons.
>>>
>>> Thanks
>>> Blkae