Desktop control for users

  • Thread starter Thread starter SJMP
  • Start date Start date
S

SJMP

Guest
I want to have a standard (very locked down desktop) for domain users on a
new windows 2003 terminal server. can someone point me in the right direction
- would I use Group policy? templates? third party software?
Any docs or kb references would be appreciated.


Thanks,

SJMP
 
Re: Desktop control for users

You need to use a combination of NTFS permissions on the file
system and a restrictive Group Policy.

Here's some reading:

278295 - How to lock down a Windows Server 2003 or Windows 2000
Terminal Server session
http://support.microsoft.com/?kbid=278295

Windows Server 2003 Terminal Server Security White Paper
http://www.microsoft.com/downloads/details.aspx?FamilyID=402A0CD1-
9E4D-4007-8EAF-C30623E71250&displaylang=en

Locking Down Windows Server 2003 Terminal Server Sessions
http://www.microsoft.com/windowsserver2003/techinfo/overview/lockdo
wn.mspx

_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

=?Utf-8?B?U0pNUA==?= <sjmp@newsgroup.nospam> wrote on 15 jan 2008
in microsoft.public.windows.terminal_services:

> I want to have a standard (very locked down desktop) for domain
> users on a new windows 2003 terminal server. can someone point
> me in the right direction - would I use Group policy? templates?
> third party software? Any docs or kb references would be
> appreciated.
>
>
> Thanks,
>
> SJMP
 
Re: Desktop control for users

Hello SJMP,

Thank you for your post, also thank to Vera Noest for sharing these useful
information.

Vera Noest is right, KB278295 will help you make a totally locked down
environment for the remote users.

A little additional information for your reference. If these domain users
are only remote users, you can also use the mandatory Roaming User Profile
to restrict the users to a standard desktop. This will also need some group
policies if necessary. Please note, nobody's profile will be saved back to
the server by doing this.

For details about how to make the mandatory Roaming User Profile, please
refer to:

Create a mandatory user profile
http://technet2.microsoft.com/windowsserver/en/library/3bd7900c-6145-461d-89
f2-c12a8c6dd7301033.mspx?mfr=true

If anything is unclear, please feel free to let me know. I look forward to
your reply.

Have a nice day!

Sincerely,
George Yin
Microsoft Online Support
Microsoft Global Technical Support Center

Get Secure! - www.microsoft.com/security
=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
 
Re: Desktop control for users

Hi,
You can also use Remote Application Center (RAC), it's free.
Download it here :

http://www.mqtechnologies.com

Regards

Thomas T.

"SJMP" <sjmp@newsgroup.nospam> wrote in message
news:6C38611A-171D-494D-A9C1-E0A69BB334E7@microsoft.com...
>I want to have a standard (very locked down desktop) for domain users on a
> new windows 2003 terminal server. can someone point me in the right
> direction
> - would I use Group policy? templates? third party software?
> Any docs or kb references would be appreciated.
>
>
> Thanks,
>
> SJMP
 
RE: Desktop control for users

Hello SJMP,

How's everything going?

I'm wondering if the suggestion has helped or if you have any further
questions. Please feel free to respond to the newsgroups if I can assist
further.

Sincerely,
George Yin
Microsoft Online Support
Microsoft Global Technical Support Center

Get Secure! - www.microsoft.com/security
=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
 
Back
Top