Terminal Services/SBS- Adding Users & Managing Desktops

  • Thread starter Thread starter compsosinc@gmail.com
  • Start date Start date
C

compsosinc@gmail.com

Guest
We are going to be installing TS2003 on a Windows 2003 Server Standard
Edition. This server is currently a file server in an SBS2000 domain
(not SBS2003).

1. The client machines are going to be setup on a factory floor, and
for simplicity, there will be just one user per machine. These
users(DC1, DC2, DC3, etc) have never been added to the domain and only
need to access the TS for a data collection program. Do we add the
users to the Active Directory on the SBS2000 box or within the TS
Local Users & Groups as members of the Remote Desktop Users? Note,
these users may need to access CAD files that are on the DC through a
mapped drive. All usrs will have the same permissions.

2. When a TS user establishes a connection to the TS, how can we only
give them an icon & Start>Programs list only for the program(s) they
will be using rather than the desktop that is used for administration.
If this is through Group Policy, is this Policy set on the TS or the
DC and does anyone have any link to specific articles/tutorials for
setting this up. The desktop should be the same for all client
machines.

Thanks
 
Re: Terminal Services/SBS- Adding Users & Managing Desktops

See inline

Jeff Pitsch
Microsoft MVP - Terminal Server
Citrix Technology Professional
Provision Networks VIP

Forums not enough?
Get support from the experts at your business
http://jeffpitschconsulting.com

compsosinc@gmail.com wrote:
> We are going to be installing TS2003 on a Windows 2003 Server Standard
> Edition. This server is currently a file server in an SBS2000 domain
> (not SBS2003).
>
> 1. The client machines are going to be setup on a factory floor, and
> for simplicity, there will be just one user per machine. These
> users(DC1, DC2, DC3, etc) have never been added to the domain and only
> need to access the TS for a data collection program. Do we add the
> users to the Active Directory on the SBS2000 box or within the TS
> Local Users & Groups as members of the Remote Desktop Users? Note,
> these users may need to access CAD files that are on the DC through a
> mapped drive. All usrs will have the same permissions.

I think you'll be happier having them in the domain. you can control
their access to the server resources with Group policy.

>
> 2. When a TS user establishes a connection to the TS, how can we only
> give them an icon & Start>Programs list only for the program(s) they
> will be using rather than the desktop that is used for administration.
> If this is through Group Policy, is this Policy set on the TS or the
> DC and does anyone have any link to specific articles/tutorials for
> setting this up. The desktop should be the same for all client
> machines.

You can use Group Policy and folder redirection (part of Group Policy)
to control this. i would lock down using GPO and redirect the start
menu and desktop so that they only see what you want them to see.
http://www.jeffpitschconsulting.com/downloads.aspx?c=13&type=download
see my whitepaper on Understanding Group Policy in a TS environment.

>
> Thanks
>
 
Re: Terminal Services/SBS- Adding Users & Managing Desktops

By all means, create AD accounts. Local accounts only create more
administrative overhead and permission problems.

You can use a policy with Folder redirection to create a customized
Desktop and Start Menu for these users.
You will need to do this with a policy created on the DC, and link
the policy to the OU which contains the Terminal Server (create a
separate OU for this purpose).

You'll find the settings here:
User Configuration - Windows Settings - Folder Redirection
Application Data
Desktop
My Documents
Start Menu

You can also manually remove all unneccessary icons from the "All
Users" profile on the Terminal Server.

To ensure that the olicy only applies to users when they connect to
the TS and not on their workstations, make sure that you also
configure the policy with "loopback processing":

Computer Configuration - Administrative Templates - System - Group
Policy
"User Group Policy loopback processing mode" - "Replace"
_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

compsosinc@gmail.com wrote on 13 sep 2007 in
microsoft.public.windows.terminal_services:

> We are going to be installing TS2003 on a Windows 2003 Server
> Standard Edition. This server is currently a file server in an
> SBS2000 domain (not SBS2003).
>
> 1. The client machines are going to be setup on a factory floor,
> and for simplicity, there will be just one user per machine.
> These users(DC1, DC2, DC3, etc) have never been added to the
> domain and only need to access the TS for a data collection
> program. Do we add the users to the Active Directory on the
> SBS2000 box or within the TS Local Users & Groups as members of
> the Remote Desktop Users? Note, these users may need to access
> CAD files that are on the DC through a mapped drive. All usrs
> will have the same permissions.
>
> 2. When a TS user establishes a connection to the TS, how can we
> only give them an icon & Start>Programs list only for the
> program(s) they will be using rather than the desktop that is
> used for administration. If this is through Group Policy, is
> this Policy set on the TS or the DC and does anyone have any
> link to specific articles/tutorials for setting this up. The
> desktop should be the same for all client machines.
>
> Thanks
 
Back
Top