Guest invantix Posted August 12, 2008 Posted August 12, 2008 I have some thin client (Wyse) units with windows XP embeded. When they boot they connect to a terminal services session. I can set the session to start an application which has been great. I now need to have two applications available to the users but that means I cennot set a "run app on connection" which in turn means they will have acces to the start menu... I would like to launch two apps with no shell on connection. Thanks
Guest Vera Noest [MVP] Posted August 12, 2008 Posted August 12, 2008 Re: Create session two apps no shell (start menu...) You can't completely get rid of the shell, but you can modify it so that it doesn't contain much more than just the Start Menu with the Logoff and Disconnect options. The solution is Group Policies. Lock your server down completly and - most important of all - redirect the users to a custom desktop folder and custom Start Menu, which you make read-only. You'll find the settings here: User Configuration - Windows Settings - Folder Redirection Application Data Desktop My Documents Start Menu And since these settings are User Configuration settings, you will also need to use loopback processing of the GPO: Computer Configuration - Administrative Templates - System - Group Policy "User Group Policy loopback processing mode" - "Replace" Then link this GPO to the OU which contains the Terminal Server. FYI: you have to do this anyway, also with a single starting application. It is very easy to get to a normal desktop from within nearly every starting application. You should not consider configuring a starting application a security feature. _________________________________________________________ Vera Noest MCSE, CCEA, Microsoft MVP - Terminal Server TS troubleshooting: http://ts.veranoest.net ___ please respond in newsgroup, NOT by private email ___ =?Utf-8?B?aW52YW50aXg=?= <invantix@discussions.microsoft.com> wrote on 12 aug 2008 in microsoft.public.windows.terminal_services: > I have some thin client (Wyse) units with windows XP embeded. > When they boot they connect to a terminal services session. I > can set the session to start an application which has been > great. I now need to have two applications available to the > users but that means I cennot set a "run app on connection" > which in turn means they will have acces to the start menu... > > I would like to launch two apps with no shell on connection. > > Thanks
Guest invantix Posted August 12, 2008 Posted August 12, 2008 Re: Create session two apps no shell (start menu...) I only want to do this for a select group of users. Also, I found this article about a bunch of group policies that can be set: http://www.windowsecurity.com/articles/Windows-Terminal-Services-Run-Single-Application.html "Vera Noest [MVP]" wrote: > You can't completely get rid of the shell, but you can modify it so > that it doesn't contain much more than just the Start Menu with the > Logoff and Disconnect options. > > The solution is Group Policies. Lock your server down completly and > - most important of all - redirect the users to a custom desktop > folder and custom Start Menu, which you make read-only. > You'll find the settings here: > > User Configuration - Windows Settings - Folder Redirection > Application Data > Desktop > My Documents > Start Menu > > And since these settings are User Configuration settings, you will > also need to use loopback processing of the GPO: > > Computer Configuration - Administrative Templates - System - Group > Policy > "User Group Policy loopback processing mode" - "Replace" > > Then link this GPO to the OU which contains the Terminal Server. > > FYI: you have to do this anyway, also with a single starting > application. It is very easy to get to a normal desktop from within > nearly every starting application. You should not consider > configuring a starting application a security feature. > > _________________________________________________________ > Vera Noest > MCSE, CCEA, Microsoft MVP - Terminal Server > TS troubleshooting: http://ts.veranoest.net > ___ please respond in newsgroup, NOT by private email ___ > > =?Utf-8?B?aW52YW50aXg=?= <invantix@discussions.microsoft.com> > wrote on 12 aug 2008 in > microsoft.public.windows.terminal_services: > > > I have some thin client (Wyse) units with windows XP embeded. > > When they boot they connect to a terminal services session. I > > can set the session to start an application which has been > > great. I now need to have two applications available to the > > users but that means I cennot set a "run app on connection" > > which in turn means they will have acces to the start menu... > > > > I would like to launch two apps with no shell on connection. > > > > Thanks >
Guest Vera Noest [MVP] Posted August 12, 2008 Posted August 12, 2008 Re: Create session two apps no shell (start menu...) No problem, you can do that as well with GPOs and security filtering. Read all the details here: How can I configure different TS desktops, based on user group membership? http://ts.veranoest.net/ts_faq_configuration.htm#desktopredirection _________________________________________________________ Vera Noest MCSE, CCEA, Microsoft MVP - Terminal Server TS troubleshooting: http://ts.veranoest.net ___ please respond in newsgroup, NOT by private email ___ =?Utf-8?B?aW52YW50aXg=?= <invantix@discussions.microsoft.com> wrote on 12 aug 2008 in microsoft.public.windows.terminal_services: > I only want to do this for a select group of users. > > Also, > > I found this article about a bunch of group policies that can be > set: > http://www.windowsecurity.com/articles/Windows-Terminal-Services- > Run-Single-Application.html > > > "Vera Noest [MVP]" wrote: > >> You can't completely get rid of the shell, but you can modify >> it so that it doesn't contain much more than just the Start >> Menu with the Logoff and Disconnect options. >> >> The solution is Group Policies. Lock your server down completly >> and - most important of all - redirect the users to a custom >> desktop folder and custom Start Menu, which you make read-only. >> You'll find the settings here: >> >> User Configuration - Windows Settings - Folder Redirection >> Application Data >> Desktop >> My Documents >> Start Menu >> >> And since these settings are User Configuration settings, you >> will also need to use loopback processing of the GPO: >> >> Computer Configuration - Administrative Templates - System - >> Group Policy >> "User Group Policy loopback processing mode" - "Replace" >> >> Then link this GPO to the OU which contains the Terminal >> Server. >> >> FYI: you have to do this anyway, also with a single starting >> application. It is very easy to get to a normal desktop from >> within nearly every starting application. You should not >> consider configuring a starting application a security feature. >> >> _________________________________________________________ >> Vera Noest >> MCSE, CCEA, Microsoft MVP - Terminal Server >> TS troubleshooting: http://ts.veranoest.net >> ___ please respond in newsgroup, NOT by private email ___ >> >> =?Utf-8?B?aW52YW50aXg=?= <invantix@discussions.microsoft.com> >> wrote on 12 aug 2008 in >> microsoft.public.windows.terminal_services: >> >> > I have some thin client (Wyse) units with windows XP embeded. >> > When they boot they connect to a terminal services session. >> > I can set the session to start an application which has been >> > great. I now need to have two applications available to the >> > users but that means I cennot set a "run app on connection" >> > which in turn means they will have acces to the start menu... >> > >> > >> > I would like to launch two apps with no shell on connection. >> > >> > Thanks
Guest Jeff Pitsch Posted August 13, 2008 Posted August 13, 2008 Re: Create session two apps no shell (start menu...) Create two rdp files and setup the start menu or the run regkey for the uses to automatically start both rdp files. -- Jeff Pitsch Microsoft MVP - Terminal Services "invantix" <invantix@discussions.microsoft.com> wrote in message news:6A0151C8-0BB1-49C0-89B8-981FFB7DAB11@microsoft.com... >I have some thin client (Wyse) units with windows XP embeded. When they >boot > they connect to a terminal services session. I can set the session to > start > an application which has been great. I now need to have two applications > available to the users but that means I cennot set a "run app on > connection" > which in turn means they will have acces to the start menu... > > I would like to launch two apps with no shell on connection. > > Thanks
Recommended Posts