Guest Vincent Schmid Posted July 15, 2008 Posted July 15, 2008 Hello, I would like to deploy some application using the new RemoteApp feature of Windows Server 2008. Can I authorize a user to run the application through RemoteApp, but deny him the right to connect to his full desktop on the server ? Regards, Vincent
Guest Vera Noest [MVP] Posted July 15, 2008 Posted July 15, 2008 Re: RemoteApp : how to deny full desktop access ? This isn't possible. If you give users access to RemoteApps, they also have access to the full desktop of the server. And even from within a RemoteApp, it's nearly always possible to get to a full desktop, so you shouldn't regard a "published" application (through RemoteApp) as a safety feature. You will still have to lockdown the server with restrictive policies and NTFS permissions on the file system. _________________________________________________________ Vera Noest MCSE, CCEA, Microsoft MVP - Terminal Server TS troubleshooting: http://ts.veranoest.net *----------- Please reply in newsgroup -------------* Vincent Schmid <vincent.schmid@fvls.vd.ch> wrote on 15 jul 2008: > Hello, > > I would like to deploy some application using the new RemoteApp > feature of Windows Server 2008. Can I authorize a user to run > the application through RemoteApp, but deny him the right to > connect to his full desktop on the server ? > > Regards, > Vincent
Guest Vincent Schmid Posted July 15, 2008 Posted July 15, 2008 Re: RemoteApp : how to deny full desktop access ? Many thanks you for your help and clear answer, Best regards, Vincent Vera Noest [MVP] a écrit : > This isn't possible. If you give users access to RemoteApps, they > also have access to the full desktop of the server. > And even from within a RemoteApp, it's nearly always possible to > get to a full desktop, so you shouldn't regard a "published" > application (through RemoteApp) as a safety feature. You will still > have to lockdown the server with restrictive policies and NTFS > permissions on the file system. > > _________________________________________________________ > Vera Noest > MCSE, CCEA, Microsoft MVP - Terminal Server > TS troubleshooting: http://ts.veranoest.net > *----------- Please reply in newsgroup -------------* > > Vincent Schmid <vincent.schmid@fvls.vd.ch> wrote on 15 jul 2008: > >> Hello, >> >> I would like to deploy some application using the new RemoteApp >> feature of Windows Server 2008. Can I authorize a user to run >> the application through RemoteApp, but deny him the right to >> connect to his full desktop on the server ? >> >> Regards, >> Vincent
Recommended Posts