Create session two apps no shell (start menu...)

  • Thread starter Thread starter invantix
  • Start date Start date
I

invantix

Guest
I have some thin client (Wyse) units with windows XP embeded. When they boot
they connect to a terminal services session. I can set the session to start
an application which has been great. I now need to have two applications
available to the users but that means I cennot set a "run app on connection"
which in turn means they will have acces to the start menu...

I would like to launch two apps with no shell on connection.

Thanks
 
Re: Create session two apps no shell (start menu...)

You can't completely get rid of the shell, but you can modify it so
that it doesn't contain much more than just the Start Menu with the
Logoff and Disconnect options.

The solution is Group Policies. Lock your server down completly and
- most important of all - redirect the users to a custom desktop
folder and custom Start Menu, which you make read-only.
You'll find the settings here:

User Configuration - Windows Settings - Folder Redirection
Application Data
Desktop
My Documents
Start Menu

And since these settings are User Configuration settings, you will
also need to use loopback processing of the GPO:

Computer Configuration - Administrative Templates - System - Group
Policy
"User Group Policy loopback processing mode" - "Replace"

Then link this GPO to the OU which contains the Terminal Server.

FYI: you have to do this anyway, also with a single starting
application. It is very easy to get to a normal desktop from within
nearly every starting application. You should not consider
configuring a starting application a security feature.

_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

=?Utf-8?B?aW52YW50aXg=?= <invantix@discussions.microsoft.com>
wrote on 12 aug 2008 in
microsoft.public.windows.terminal_services:

> I have some thin client (Wyse) units with windows XP embeded.
> When they boot they connect to a terminal services session. I
> can set the session to start an application which has been
> great. I now need to have two applications available to the
> users but that means I cennot set a "run app on connection"
> which in turn means they will have acces to the start menu...
>
> I would like to launch two apps with no shell on connection.
>
> Thanks
 
Re: Create session two apps no shell (start menu...)

I only want to do this for a select group of users.

Also,

I found this article about a bunch of group policies that can be set:
http://www.windowsecurity.com/articles/Windows-Terminal-Services-Run-Single-Application.html


"Vera Noest [MVP]" wrote:

> You can't completely get rid of the shell, but you can modify it so
> that it doesn't contain much more than just the Start Menu with the
> Logoff and Disconnect options.
>
> The solution is Group Policies. Lock your server down completly and
> - most important of all - redirect the users to a custom desktop
> folder and custom Start Menu, which you make read-only.
> You'll find the settings here:
>
> User Configuration - Windows Settings - Folder Redirection
> Application Data
> Desktop
> My Documents
> Start Menu
>
> And since these settings are User Configuration settings, you will
> also need to use loopback processing of the GPO:
>
> Computer Configuration - Administrative Templates - System - Group
> Policy
> "User Group Policy loopback processing mode" - "Replace"
>
> Then link this GPO to the OU which contains the Terminal Server.
>
> FYI: you have to do this anyway, also with a single starting
> application. It is very easy to get to a normal desktop from within
> nearly every starting application. You should not consider
> configuring a starting application a security feature.
>
> _________________________________________________________
> Vera Noest
> MCSE, CCEA, Microsoft MVP - Terminal Server
> TS troubleshooting: http://ts.veranoest.net
> ___ please respond in newsgroup, NOT by private email ___
>
> =?Utf-8?B?aW52YW50aXg=?= <invantix@discussions.microsoft.com>
> wrote on 12 aug 2008 in
> microsoft.public.windows.terminal_services:
>
> > I have some thin client (Wyse) units with windows XP embeded.
> > When they boot they connect to a terminal services session. I
> > can set the session to start an application which has been
> > great. I now need to have two applications available to the
> > users but that means I cennot set a "run app on connection"
> > which in turn means they will have acces to the start menu...
> >
> > I would like to launch two apps with no shell on connection.
> >
> > Thanks

>
 
Re: Create session two apps no shell (start menu...)

No problem, you can do that as well with GPOs and security
filtering.
Read all the details here:

How can I configure different TS desktops, based on user group
membership?
http://ts.veranoest.net/ts_faq_configuration.htm#desktopredirection
_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

=?Utf-8?B?aW52YW50aXg=?= <invantix@discussions.microsoft.com>
wrote on 12 aug 2008 in
microsoft.public.windows.terminal_services:

> I only want to do this for a select group of users.
>
> Also,
>
> I found this article about a bunch of group policies that can be
> set:
> http://www.windowsecurity.com/articles/Windows-Terminal-Services-
> Run-Single-Application.html
>
>
> "Vera Noest [MVP]" wrote:
>
>> You can't completely get rid of the shell, but you can modify
>> it so that it doesn't contain much more than just the Start
>> Menu with the Logoff and Disconnect options.
>>
>> The solution is Group Policies. Lock your server down completly
>> and - most important of all - redirect the users to a custom
>> desktop folder and custom Start Menu, which you make read-only.
>> You'll find the settings here:
>>
>> User Configuration - Windows Settings - Folder Redirection
>> Application Data
>> Desktop
>> My Documents
>> Start Menu
>>
>> And since these settings are User Configuration settings, you
>> will also need to use loopback processing of the GPO:
>>
>> Computer Configuration - Administrative Templates - System -
>> Group Policy
>> "User Group Policy loopback processing mode" - "Replace"
>>
>> Then link this GPO to the OU which contains the Terminal
>> Server.
>>
>> FYI: you have to do this anyway, also with a single starting
>> application. It is very easy to get to a normal desktop from
>> within nearly every starting application. You should not
>> consider configuring a starting application a security feature.
>>
>> _________________________________________________________
>> Vera Noest
>> MCSE, CCEA, Microsoft MVP - Terminal Server
>> TS troubleshooting: http://ts.veranoest.net
>> ___ please respond in newsgroup, NOT by private email ___
>>
>> =?Utf-8?B?aW52YW50aXg=?= <invantix@discussions.microsoft.com>
>> wrote on 12 aug 2008 in
>> microsoft.public.windows.terminal_services:
>>
>> > I have some thin client (Wyse) units with windows XP embeded.
>> > When they boot they connect to a terminal services session.
>> > I can set the session to start an application which has been
>> > great. I now need to have two applications available to the
>> > users but that means I cennot set a "run app on connection"
>> > which in turn means they will have acces to the start menu...
>> >
>> >
>> > I would like to launch two apps with no shell on connection.
>> >
>> > Thanks
 
Re: Create session two apps no shell (start menu...)

Create two rdp files and setup the start menu or the run regkey for the uses
to automatically start both rdp files.

--
Jeff Pitsch
Microsoft MVP - Terminal Services

"invantix" <invantix@discussions.microsoft.com> wrote in message
news:6A0151C8-0BB1-49C0-89B8-981FFB7DAB11@microsoft.com...
>I have some thin client (Wyse) units with windows XP embeded. When they
>boot
> they connect to a terminal services session. I can set the session to
> start
> an application which has been great. I now need to have two applications
> available to the users but that means I cennot set a "run app on
> connection"
> which in turn means they will have acces to the start menu...
>
> I would like to launch two apps with no shell on connection.
>
> Thanks
 
Back
Top