Create session two apps no shell (start menu...)

[Guest invantix]

I have some thin client (Wyse) units with windows XP embeded. When they boot

they connect to a terminal services session. I can set the session to start

an application which has been great. I now need to have two applications

available to the users but that means I cennot set a "run app on connection"

which in turn means they will have acces to the start menu...

 

I would like to launch two apps with no shell on connection.

 

Thanks

[Guest Vera Noest [MVP]]

Re: Create session two apps no shell (start menu...)

 

You can't completely get rid of the shell, but you can modify it so

that it doesn't contain much more than just the Start Menu with the

Logoff and Disconnect options.

 

The solution is Group Policies. Lock your server down completly and

- most important of all - redirect the users to a custom desktop

folder and custom Start Menu, which you make read-only.

You'll find the settings here:

 

User Configuration - Windows Settings - Folder Redirection

Application Data

Desktop

My Documents

Start Menu

 

And since these settings are User Configuration settings, you will

also need to use loopback processing of the GPO:

 

Computer Configuration - Administrative Templates - System - Group

Policy

"User Group Policy loopback processing mode" - "Replace"

 

Then link this GPO to the OU which contains the Terminal Server.

 

FYI: you have to do this anyway, also with a single starting

application. It is very easy to get to a normal desktop from within

nearly every starting application. You should not consider

configuring a starting application a security feature.

 

_________________________________________________________

Vera Noest

MCSE, CCEA, Microsoft MVP - Terminal Server

TS troubleshooting: http://ts.veranoest.net

___ please respond in newsgroup, NOT by private email ___

 

=?Utf-8?B?aW52YW50aXg=?= <invantix@discussions.microsoft.com>

wrote on 12 aug 2008 in

microsoft.public.windows.terminal_services:

> I have some thin client (Wyse) units with windows XP embeded.

> When they boot they connect to a terminal services session. I

> can set the session to start an application which has been

> great. I now need to have two applications available to the

> users but that means I cennot set a "run app on connection"

> which in turn means they will have acces to the start menu...

>

> I would like to launch two apps with no shell on connection.

>

> Thanks

[Guest invantix]

Re: Create session two apps no shell (start menu...)

 

I only want to do this for a select group of users.

 

Also,

 

I found this article about a bunch of group policies that can be set:

http://www.windowsecurity.com/articles/Windows-Terminal-Services-Run-Single-Application.html

 

 

"Vera Noest [MVP]" wrote:

> You can't completely get rid of the shell, but you can modify it so

> that it doesn't contain much more than just the Start Menu with the

> Logoff and Disconnect options.

>

> The solution is Group Policies. Lock your server down completly and

> - most important of all - redirect the users to a custom desktop

> folder and custom Start Menu, which you make read-only.

> You'll find the settings here:

>

> User Configuration - Windows Settings - Folder Redirection

> Application Data

> Desktop

> My Documents

> Start Menu

>

> And since these settings are User Configuration settings, you will

> also need to use loopback processing of the GPO:

>

> Computer Configuration - Administrative Templates - System - Group

> Policy

> "User Group Policy loopback processing mode" - "Replace"

>

> Then link this GPO to the OU which contains the Terminal Server.

>

> FYI: you have to do this anyway, also with a single starting

> application. It is very easy to get to a normal desktop from within

> nearly every starting application. You should not consider

> configuring a starting application a security feature.

>

> _________________________________________________________

> Vera Noest

> MCSE, CCEA, Microsoft MVP - Terminal Server

> TS troubleshooting: http://ts.veranoest.net

> ___ please respond in newsgroup, NOT by private email ___

>

> =?Utf-8?B?aW52YW50aXg=?= <invantix@discussions.microsoft.com>

> wrote on 12 aug 2008 in

> microsoft.public.windows.terminal_services:

>

> > I have some thin client (Wyse) units with windows XP embeded.

> > When they boot they connect to a terminal services session. I

> > can set the session to start an application which has been

> > great. I now need to have two applications available to the

> > users but that means I cennot set a "run app on connection"

> > which in turn means they will have acces to the start menu...

> >

> > I would like to launch two apps with no shell on connection.

> >

> > Thanks

>

[Guest Vera Noest [MVP]]

Re: Create session two apps no shell (start menu...)

 

No problem, you can do that as well with GPOs and security

filtering.

Read all the details here:

 

How can I configure different TS desktops, based on user group

membership?

http://ts.veranoest.net/ts_faq_configuration.htm#desktopredirection

_________________________________________________________

Vera Noest

MCSE, CCEA, Microsoft MVP - Terminal Server

TS troubleshooting: http://ts.veranoest.net

___ please respond in newsgroup, NOT by private email ___

 

=?Utf-8?B?aW52YW50aXg=?= <invantix@discussions.microsoft.com>

wrote on 12 aug 2008 in

microsoft.public.windows.terminal_services:

> I only want to do this for a select group of users.

>

> Also,

>

> I found this article about a bunch of group policies that can be

> set:

> http://www.windowsecurity.com/articles/Windows-Terminal-Services-

> Run-Single-Application.html

>

>

> "Vera Noest [MVP]" wrote:

>

>> You can't completely get rid of the shell, but you can modify

>> it so that it doesn't contain much more than just the Start

>> Menu with the Logoff and Disconnect options.

>>

>> The solution is Group Policies. Lock your server down completly

>> and - most important of all - redirect the users to a custom

>> desktop folder and custom Start Menu, which you make read-only.

>> You'll find the settings here:

>>

>> User Configuration - Windows Settings - Folder Redirection

>> Application Data

>> Desktop

>> My Documents

>> Start Menu

>>

>> And since these settings are User Configuration settings, you

>> will also need to use loopback processing of the GPO:

>>

>> Computer Configuration - Administrative Templates - System -

>> Group Policy

>> "User Group Policy loopback processing mode" - "Replace"

>>

>> Then link this GPO to the OU which contains the Terminal

>> Server.

>>

>> FYI: you have to do this anyway, also with a single starting

>> application. It is very easy to get to a normal desktop from

>> within nearly every starting application. You should not

>> consider configuring a starting application a security feature.

>>

>> _________________________________________________________

>> Vera Noest

>> MCSE, CCEA, Microsoft MVP - Terminal Server

>> TS troubleshooting: http://ts.veranoest.net

>> ___ please respond in newsgroup, NOT by private email ___

>>

>> =?Utf-8?B?aW52YW50aXg=?= <invantix@discussions.microsoft.com>

>> wrote on 12 aug 2008 in

>> microsoft.public.windows.terminal_services:

>>

>> > I have some thin client (Wyse) units with windows XP embeded.

>> > When they boot they connect to a terminal services session.

>> > I can set the session to start an application which has been

>> > great. I now need to have two applications available to the

>> > users but that means I cennot set a "run app on connection"

>> > which in turn means they will have acces to the start menu...

>> >

>> >

>> > I would like to launch two apps with no shell on connection.

>> >

>> > Thanks

[Guest Jeff Pitsch]

Re: Create session two apps no shell (start menu...)

 

Create two rdp files and setup the start menu or the run regkey for the uses

to automatically start both rdp files.

 

--

Jeff Pitsch

Microsoft MVP - Terminal Services

 

"invantix" <invantix@discussions.microsoft.com> wrote in message

news:6A0151C8-0BB1-49C0-89B8-981FFB7DAB11@microsoft.com...

>I have some thin client (Wyse) units with windows XP embeded. When they

>boot

> they connect to a terminal services session. I can set the session to

> start

> an application which has been great. I now need to have two applications

> available to the users but that means I cennot set a "run app on

> connection"

> which in turn means they will have acces to the start menu...

>

> I would like to launch two apps with no shell on connection.

>

> Thanks