Remote Desktop from TS Application Mode

  • Thread starter Thread starter MS Poster
  • Start date Start date
M

MS Poster

Guest
Hello:

We are running TS in Application Mode and have pretty tight control over
what apps get run on this server. We have a user requesting to use Remote
Desktop application to access another server from her TS session. Is there
any problem (actual or potential) with allowing this?

Thanks.
 
Re: Remote Desktop from TS Application Mode

MS Poster <spamaway@nospam.com> wrote:
> Hello:
>
> We are running TS in Application Mode and have pretty tight control
> over what apps get run on this server. We have a user requesting to
> use Remote Desktop application to access another server from her TS
> session. Is there any problem (actual or potential) with allowing
> this?
> Thanks.

Well, I suppose she could set up the client to allow disk/drive redirection,
which might not be what you want.

I'd probably just tell her to open another parallel TS window on her own
computer - it's be a lot easier overall.
 
Re: Remote Desktop from TS Application Mode

Hello Lanwench [MVP - Exchange],

> MS Poster <spamaway@nospam.com> wrote:
>
>> Hello:
>>
>> We are running TS in Application Mode and have pretty tight control
>> over what apps get run on this server. We have a user requesting to
>> use Remote Desktop application to access another server from her TS
>> session. Is there any problem (actual or potential) with allowing
>> this?
>> Thanks.
> Well, I suppose she could set up the client to allow disk/drive
> redirection, which might not be what you want.
>
> I'd probably just tell her to open another parallel TS window on her
> own computer - it's be a lot easier overall.
>

Thanks. We have opened a hole through the firewall just to the one TS box.
For VPN access, users must have a company laptop -- which she does not have.

Could we prevent the redirection via GPO or TS policy settings?
 
Re: Remote Desktop from TS Application Mode

To clarify, computer A has a TS connection to server B. From the TS session,
you want to access server C, but not allow drives etc. to be redirected onto
server C?

Computer A --> Server B --> Server C

In that case,

1.) You can use TS config settings or GP settings on Server C
tscc.msc -> Client Settings
2.) Disable drive, printer, clipboard redirection on the Remote Desktop
Connections option on Server B
RDC --> Options --> Local Resources
--
Thanks,
Priya.

--
This posting is provided "AS IS" with no warranties, and confers no rights.

"MS Poster" <spamaway@nospam.com> wrote in message
news:b3173d71a5df8ca227a2ba34b94@msnews.microsoft.com...
> Hello Lanwench [MVP - Exchange],
>
>> MS Poster <spamaway@nospam.com> wrote:
>>
>>> Hello:
>>>
>>> We are running TS in Application Mode and have pretty tight control
>>> over what apps get run on this server. We have a user requesting to
>>> use Remote Desktop application to access another server from her TS
>>> session. Is there any problem (actual or potential) with allowing
>>> this?
>>> Thanks.
>> Well, I suppose she could set up the client to allow disk/drive
>> redirection, which might not be what you want.
>>
>> I'd probably just tell her to open another parallel TS window on her
>> own computer - it's be a lot easier overall.
>>
>
> Thanks. We have opened a hole through the firewall just to the one TS box.
> For VPN access, users must have a company laptop -- which she does not
> have.
> Could we prevent the redirection via GPO or TS policy settings?
>
>
 
Re: Remote Desktop from TS Application Mode

MS Poster <spamaway@nospam.com> wrote:
> Hello Lanwench [MVP - Exchange],
>
>> MS Poster <spamaway@nospam.com> wrote:
>>
>>> Hello:
>>>
>>> We are running TS in Application Mode and have pretty tight control
>>> over what apps get run on this server. We have a user requesting to
>>> use Remote Desktop application to access another server from her TS
>>> session. Is there any problem (actual or potential) with allowing
>>> this?
>>> Thanks.
>> Well, I suppose she could set up the client to allow disk/drive
>> redirection, which might not be what you want.
>>
>> I'd probably just tell her to open another parallel TS window on her
>> own computer - it's be a lot easier overall.
>>
>
> Thanks. We have opened a hole through the firewall just to the one TS
> box.

> For VPN access, users must have a company laptop -- which she
> does not have.
> Could we prevent the redirection via GPO or TS policy settings?

If the other server to which she wants to connect, is one of *yours* / under
your control, yes. If it's not one of your own servers you can't do anything
about it that I know of.
 
Re: Remote Desktop from TS Application Mode

"Lanwench [MVP - Exchange]"
<lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote
on 12 jan 2008 in microsoft.public.windows.terminal_services:

> MS Poster <spamaway@nospam.com> wrote:
>> Hello Lanwench [MVP - Exchange],
>>
>>> MS Poster <spamaway@nospam.com> wrote:
>>>
>>>> Hello:
>>>>
>>>> We are running TS in Application Mode and have pretty tight
>>>> control over what apps get run on this server. We have a user
>>>> requesting to use Remote Desktop application to access
>>>> another server from her TS session. Is there any problem
>>>> (actual or potential) with allowing this?
>>>> Thanks.
>>> Well, I suppose she could set up the client to allow
>>> disk/drive redirection, which might not be what you want.
>>>
>>> I'd probably just tell her to open another parallel TS window
>>> on her own computer - it's be a lot easier overall.
>>>
>>
>> Thanks. We have opened a hole through the firewall just to the
>> one TS box.
>
>> For VPN access, users must have a company laptop -- which she
>> does not have.
>> Could we prevent the redirection via GPO or TS policy settings?
>
> If the other server to which she wants to connect, is one of
> *yours* / under your control, yes. If it's not one of your own
> servers you can't do anything about it that I know of.

Check here for a solution when the TS is *not* under you control,
as seems to be the case here.

How can I prevent my users from redirecting their local resources,
like drives and clip board?
http://ts.veranoest.net/ts_faq_client_resources.htm#preventDriveMap
ping

_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___
 
Re: Remote Desktop from TS Application Mode

Thanks for the info. This other server is, indeed, internal. I would only
allow deskop control -- none of the other redirected services. So it sounds
like just the inherent action of "cascading" the remote control is not a
problem. (I know we used to do it all the time as admins, but I thought there
might be something different with running it as an application server.)

Thanks again.


Hello Vera Noest [MVP],

> http://ts.veranoest.net/ts_faq_client_resources.htm#preventDriveMap
> ping
>
 
Re: Remote Desktop from TS Application Mode

Vera Noest [MVP] <vera.noest@remove-this.hem.utfors.se> wrote:
> "Lanwench [MVP - Exchange]"
> <lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote
> on 12 jan 2008 in microsoft.public.windows.terminal_services:
>
>> MS Poster <spamaway@nospam.com> wrote:
>>> Hello Lanwench [MVP - Exchange],
>>>
>>>> MS Poster <spamaway@nospam.com> wrote:
>>>>
>>>>> Hello:
>>>>>
>>>>> We are running TS in Application Mode and have pretty tight
>>>>> control over what apps get run on this server. We have a user
>>>>> requesting to use Remote Desktop application to access
>>>>> another server from her TS session. Is there any problem
>>>>> (actual or potential) with allowing this?
>>>>> Thanks.
>>>> Well, I suppose she could set up the client to allow
>>>> disk/drive redirection, which might not be what you want.
>>>>
>>>> I'd probably just tell her to open another parallel TS window
>>>> on her own computer - it's be a lot easier overall.
>>>>
>>>
>>> Thanks. We have opened a hole through the firewall just to the
>>> one TS box.
>>
>>> For VPN access, users must have a company laptop -- which she
>>> does not have.
>>> Could we prevent the redirection via GPO or TS policy settings?
>>
>> If the other server to which she wants to connect, is one of
>> *yours* / under your control, yes. If it's not one of your own
>> servers you can't do anything about it that I know of.
>
> Check here for a solution when the TS is *not* under you control,
> as seems to be the case here.
>
> How can I prevent my users from redirecting their local resources,
> like drives and clip board?
> http://ts.veranoest.net/ts_faq_client_resources.htm#preventDriveMap
> ping
>

Ah - cool beans. Thanks, Vera.

> _________________________________________________________
> Vera Noest
> MCSE, CCEA, Microsoft MVP - Terminal Server
> TS troubleshooting: http://ts.veranoest.net
> ___ please respond in newsgroup, NOT by private email ___
 
Back
Top