Guest Andy Posted July 2, 2008 Posted July 2, 2008 Hi, but of a server virgin here so be kind! I've installed win2k8 and setup application sharing ok. But, I can't find where to restrict desktop logins. I'm hoping to use the TS app stuff to allow people to trial my software - not to login to my server! Any help much appreciated, Cheers, Andy
Guest Vera Noest [MVP] Posted July 2, 2008 Posted July 2, 2008 Re: Win2k8 TS Apps, how to disable desktop login? This isn't possible. If you give users access to RemoteApps, they also have access to the full desktop of the server. And even from within a RemoteApp, it's nearly always possible to get to a full desktop, so you shouldn't regard a "published" application (through RemoteApp) as a safety feature. You will still have to lockdown the server with restrictive policies and NTFS permissions on the file system. _________________________________________________________ Vera Noest MCSE, CCEA, Microsoft MVP - Terminal Server TS troubleshooting: http://ts.veranoest.net ___ please respond in newsgroup, NOT by private email ___ =?Utf-8?B?QW5keQ==?= <Andy@discussions.microsoft.com> wrote on 02 jul 2008 in microsoft.public.windows.terminal_services: > Hi, but of a server virgin here so be kind! > I've installed win2k8 and setup application sharing ok. > But, I can't find where to restrict desktop logins. > I'm hoping to use the TS app stuff to allow people to trial my > software - not to login to my server! > Any help much appreciated, > Cheers, > Andy
Guest Andy Posted July 2, 2008 Posted July 2, 2008 Re: Win2k8 TS Apps, how to disable desktop login? Well, that's a shame :( Wonder why a simple "don't allow desktop access" wasn't added? You also say that its possible to get to the desktop from a remote app - even if it doesn't have any form of shell feature? i.e. my own 'hello world' app, with only an exit button? Thanks for your help. Andy "Vera Noest [MVP]" wrote: > This isn't possible. If you give users access to RemoteApps, they > also have access to the full desktop of the server. > And even from within a RemoteApp, it's nearly always possible to get > to a full desktop, so you shouldn't regard a "published" application > (through RemoteApp) as a safety feature. You will still have to > lockdown the server with restrictive policies and NTFS permissions on > the file system. > > _________________________________________________________ > Vera Noest > MCSE, CCEA, Microsoft MVP - Terminal Server > TS troubleshooting: http://ts.veranoest.net > ___ please respond in newsgroup, NOT by private email ___ > > =?Utf-8?B?QW5keQ==?= <Andy@discussions.microsoft.com> wrote on 02 > jul 2008 in microsoft.public.windows.terminal_services: > > > Hi, but of a server virgin here so be kind! > > I've installed win2k8 and setup application sharing ok. > > But, I can't find where to restrict desktop logins. > > I'm hoping to use the TS app stuff to allow people to trial my > > software - not to login to my server! > > Any help much appreciated, > > Cheers, > > Andy >
Guest Vera Noest [MVP] Posted July 3, 2008 Posted July 3, 2008 Re: Win2k8 TS Apps, how to disable desktop login? Well, it might be difficult from your "Hello world" application, but most real-world applications have more functionality than that :-) Let me put it this way: publish any standard application, like notepad, and you can get to the full desktop within seconds. _________________________________________________________ Vera Noest MCSE, CCEA, Microsoft MVP - Terminal Server TS troubleshooting: http://ts.veranoest.net ___ please respond in newsgroup, NOT by private email ___ =?Utf-8?B?QW5keQ==?= <Andy@discussions.microsoft.com> wrote on 03 jul 2008 in microsoft.public.windows.terminal_services: > Well, that's a shame :( > > Wonder why a simple "don't allow desktop access" wasn't added? > > You also say that its possible to get to the desktop from a > remote app - even if it doesn't have any form of shell feature? > i.e. my own 'hello world' app, with only an exit button? > > Thanks for your help. > Andy > > "Vera Noest [MVP]" wrote: > >> This isn't possible. If you give users access to RemoteApps, >> they also have access to the full desktop of the server. >> And even from within a RemoteApp, it's nearly always possible >> to get to a full desktop, so you shouldn't regard a "published" >> application (through RemoteApp) as a safety feature. You will >> still have to lockdown the server with restrictive policies and >> NTFS permissions on the file system. >> >> _________________________________________________________ >> Vera Noest >> MCSE, CCEA, Microsoft MVP - Terminal Server >> TS troubleshooting: http://ts.veranoest.net >> ___ please respond in newsgroup, NOT by private email ___ >> >> =?Utf-8?B?QW5keQ==?= <Andy@discussions.microsoft.com> wrote on >> 02 jul 2008 in microsoft.public.windows.terminal_services: >> >> > Hi, but of a server virgin here so be kind! >> > I've installed win2k8 and setup application sharing ok. >> > But, I can't find where to restrict desktop logins. >> > I'm hoping to use the TS app stuff to allow people to trial >> > my software - not to login to my server! >> > Any help much appreciated, >> > Cheers, >> > Andy
Guest jolteroli Posted July 3, 2008 Posted July 3, 2008 Re: Win2k8 TS Apps, how to disable desktop login? "Vera Noest [MVP]" <vera.noest@remove-this.hem.utfors.se> schrieb im Newsbeitrag news:Xns9AD09972E1A54veranoesthemutforsse@207.46.248.16... > Well, it might be difficult from your "Hello world" application, > but most real-world applications have more functionality than that > :-) > Let me put it this way: publish any standard application, like > notepad, and you can get to the full desktop within seconds. lol, that really works! > _________________________________________________________ > Vera Noest > MCSE, CCEA, Microsoft MVP - Terminal Server > TS troubleshooting: http://ts.veranoest.net > ___ please respond in newsgroup, NOT by private email ___ > > =?Utf-8?B?QW5keQ==?= <Andy@discussions.microsoft.com> wrote on 03 > jul 2008 in microsoft.public.windows.terminal_services: > >> Well, that's a shame :( >> >> Wonder why a simple "don't allow desktop access" wasn't added? >> >> You also say that its possible to get to the desktop from a >> remote app - even if it doesn't have any form of shell feature? >> i.e. my own 'hello world' app, with only an exit button? >> >> Thanks for your help. >> Andy >> >> "Vera Noest [MVP]" wrote: >> >>> This isn't possible. If you give users access to RemoteApps, >>> they also have access to the full desktop of the server. >>> And even from within a RemoteApp, it's nearly always possible >>> to get to a full desktop, so you shouldn't regard a "published" >>> application (through RemoteApp) as a safety feature. You will >>> still have to lockdown the server with restrictive policies and >>> NTFS permissions on the file system. >>> >>> _________________________________________________________ >>> Vera Noest >>> MCSE, CCEA, Microsoft MVP - Terminal Server >>> TS troubleshooting: http://ts.veranoest.net >>> ___ please respond in newsgroup, NOT by private email ___ >>> >>> =?Utf-8?B?QW5keQ==?= <Andy@discussions.microsoft.com> wrote on >>> 02 jul 2008 in microsoft.public.windows.terminal_services: >>> >>> > Hi, but of a server virgin here so be kind! >>> > I've installed win2k8 and setup application sharing ok. >>> > But, I can't find where to restrict desktop logins. >>> > I'm hoping to use the TS app stuff to allow people to trial >>> > my software - not to login to my server! >>> > Any help much appreciated, >>> > Cheers, >>> > Andy
Recommended Posts