Win2k8 TS Apps, how to disable desktop login?

[Guest Andy]

Hi, but of a server virgin here so be kind!

I've installed win2k8 and setup application sharing ok.

But, I can't find where to restrict desktop logins.

I'm hoping to use the TS app stuff to allow people to trial my software -

not to login to my server!

Any help much appreciated,

Cheers,

Andy

[Guest Vera Noest [MVP]]

Re: Win2k8 TS Apps, how to disable desktop login?

 

This isn't possible. If you give users access to RemoteApps, they

also have access to the full desktop of the server.

And even from within a RemoteApp, it's nearly always possible to get

to a full desktop, so you shouldn't regard a "published" application

(through RemoteApp) as a safety feature. You will still have to

lockdown the server with restrictive policies and NTFS permissions on

the file system.

 

_________________________________________________________

Vera Noest

MCSE, CCEA, Microsoft MVP - Terminal Server

TS troubleshooting: http://ts.veranoest.net

___ please respond in newsgroup, NOT by private email ___

 

=?Utf-8?B?QW5keQ==?= <Andy@discussions.microsoft.com> wrote on 02

jul 2008 in microsoft.public.windows.terminal_services:

> Hi, but of a server virgin here so be kind!

> I've installed win2k8 and setup application sharing ok.

> But, I can't find where to restrict desktop logins.

> I'm hoping to use the TS app stuff to allow people to trial my

> software - not to login to my server!

> Any help much appreciated,

> Cheers,

> Andy

[Guest Andy]

Re: Win2k8 TS Apps, how to disable desktop login?

 

Well, that's a shame :(

 

Wonder why a simple "don't allow desktop access" wasn't added?

 

You also say that its possible to get to the desktop from a remote app -

even if it doesn't have any form of shell feature? i.e. my own 'hello world'

app, with only an exit button?

 

Thanks for your help.

Andy

 

"Vera Noest [MVP]" wrote:

> This isn't possible. If you give users access to RemoteApps, they

> also have access to the full desktop of the server.

> And even from within a RemoteApp, it's nearly always possible to get

> to a full desktop, so you shouldn't regard a "published" application

> (through RemoteApp) as a safety feature. You will still have to

> lockdown the server with restrictive policies and NTFS permissions on

> the file system.

>

> _________________________________________________________

> Vera Noest

> MCSE, CCEA, Microsoft MVP - Terminal Server

> TS troubleshooting: http://ts.veranoest.net

> ___ please respond in newsgroup, NOT by private email ___

>

> =?Utf-8?B?QW5keQ==?= <Andy@discussions.microsoft.com> wrote on 02

> jul 2008 in microsoft.public.windows.terminal_services:

>

> > Hi, but of a server virgin here so be kind!

> > I've installed win2k8 and setup application sharing ok.

> > But, I can't find where to restrict desktop logins.

> > I'm hoping to use the TS app stuff to allow people to trial my

> > software - not to login to my server!

> > Any help much appreciated,

> > Cheers,

> > Andy

>

[Guest Vera Noest [MVP]]

Re: Win2k8 TS Apps, how to disable desktop login?

 

Well, it might be difficult from your "Hello world" application,

but most real-world applications have more functionality than that

:-)

Let me put it this way: publish any standard application, like

notepad, and you can get to the full desktop within seconds.

_________________________________________________________

Vera Noest

MCSE, CCEA, Microsoft MVP - Terminal Server

TS troubleshooting: http://ts.veranoest.net

___ please respond in newsgroup, NOT by private email ___

 

=?Utf-8?B?QW5keQ==?= <Andy@discussions.microsoft.com> wrote on 03

jul 2008 in microsoft.public.windows.terminal_services:

> Well, that's a shame :(

>

> Wonder why a simple "don't allow desktop access" wasn't added?

>

> You also say that its possible to get to the desktop from a

> remote app - even if it doesn't have any form of shell feature?

> i.e. my own 'hello world' app, with only an exit button?

>

> Thanks for your help.

> Andy

>

> "Vera Noest [MVP]" wrote:

>

>> This isn't possible. If you give users access to RemoteApps,

>> they also have access to the full desktop of the server.

>> And even from within a RemoteApp, it's nearly always possible

>> to get to a full desktop, so you shouldn't regard a "published"

>> application (through RemoteApp) as a safety feature. You will

>> still have to lockdown the server with restrictive policies and

>> NTFS permissions on the file system.

>>

>> _________________________________________________________

>> Vera Noest

>> MCSE, CCEA, Microsoft MVP - Terminal Server

>> TS troubleshooting: http://ts.veranoest.net

>> ___ please respond in newsgroup, NOT by private email ___

>>

>> =?Utf-8?B?QW5keQ==?= <Andy@discussions.microsoft.com> wrote on

>> 02 jul 2008 in microsoft.public.windows.terminal_services:

>>

>> > Hi, but of a server virgin here so be kind!

>> > I've installed win2k8 and setup application sharing ok.

>> > But, I can't find where to restrict desktop logins.

>> > I'm hoping to use the TS app stuff to allow people to trial

>> > my software - not to login to my server!

>> > Any help much appreciated,

>> > Cheers,

>> > Andy

[Guest jolteroli]

Re: Win2k8 TS Apps, how to disable desktop login?

 

"Vera Noest [MVP]" <vera.noest@remove-this.hem.utfors.se> schrieb im

Newsbeitrag news:Xns9AD09972E1A54veranoesthemutforsse@207.46.248.16...

> Well, it might be difficult from your "Hello world" application,

> but most real-world applications have more functionality than that

> :-)

> Let me put it this way: publish any standard application, like

> notepad, and you can get to the full desktop within seconds.

 

lol, that really works!

> _________________________________________________________

> Vera Noest

> MCSE, CCEA, Microsoft MVP - Terminal Server

> TS troubleshooting: http://ts.veranoest.net

> ___ please respond in newsgroup, NOT by private email ___

>

> =?Utf-8?B?QW5keQ==?= <Andy@discussions.microsoft.com> wrote on 03

> jul 2008 in microsoft.public.windows.terminal_services:

>

>> Well, that's a shame :(

>>

>> Wonder why a simple "don't allow desktop access" wasn't added?

>>

>> You also say that its possible to get to the desktop from a

>> remote app - even if it doesn't have any form of shell feature?

>> i.e. my own 'hello world' app, with only an exit button?

>>

>> Thanks for your help.

>> Andy

>>

>> "Vera Noest [MVP]" wrote:

>>

>>> This isn't possible. If you give users access to RemoteApps,

>>> they also have access to the full desktop of the server.

>>> And even from within a RemoteApp, it's nearly always possible

>>> to get to a full desktop, so you shouldn't regard a "published"

>>> application (through RemoteApp) as a safety feature. You will

>>> still have to lockdown the server with restrictive policies and

>>> NTFS permissions on the file system.

>>>

>>> _________________________________________________________

>>> Vera Noest

>>> MCSE, CCEA, Microsoft MVP - Terminal Server

>>> TS troubleshooting: http://ts.veranoest.net

>>> ___ please respond in newsgroup, NOT by private email ___

>>>

>>> =?Utf-8?B?QW5keQ==?= <Andy@discussions.microsoft.com> wrote on

>>> 02 jul 2008 in microsoft.public.windows.terminal_services:

>>>

>>> > Hi, but of a server virgin here so be kind!

>>> > I've installed win2k8 and setup application sharing ok.

>>> > But, I can't find where to restrict desktop logins.

>>> > I'm hoping to use the TS app stuff to allow people to trial

>>> > my software - not to login to my server!

>>> > Any help much appreciated,

>>> > Cheers,

>>> > Andy