Guest Blake Posted October 23, 2008 Posted October 23, 2008 I've read in some places where I can give a user access to a RemoteApp WITHOUT giving them full remote desktop. I've also read the opposite. Can I give someone the ability to use RemoteApp (Windows 2008 TS server, obviously) without giving them the ability to actually log into a full fledged deskop via RDP? ie - I'd like to keep them off the desktop for security reasons. Thanks Blkae
Guest Jeff Pitsch Posted October 23, 2008 Posted October 23, 2008 Re: RemoteApp vs. full Remote Desktop You can if you assign in their user account or gpo a dummy application to start at logon. This will not affect the remoteapp capability but it will prevent the user from starting a full desktop. run something like logoff.exe or something like that and you are golden. Jeff Pitsch Microsoft MVP - Terminal Services Blake wrote: > I've read in some places where I can give a user access to a RemoteApp > WITHOUT giving them full remote desktop. I've also read the opposite. > > Can I give someone the ability to use RemoteApp (Windows 2008 TS server, > obviously) without giving them the ability to actually log into a full > fledged deskop via RDP? > > ie - I'd like to keep them off the desktop for security reasons. > > Thanks > Blkae > >
Guest Vera Noest [MVP] Posted October 23, 2008 Posted October 23, 2008 Re: RemoteApp vs. full Remote Desktop But keep in mind that it is trivial to get to the full desktop (or run any application) from within nearly every application. _________________________________________________________ Vera Noest MCSE, CCEA, Microsoft MVP - Terminal Server TS troubleshooting: http://ts.veranoest.net ___ please respond in newsgroup, NOT by private email ___ Jeff Pitsch <jeff.pitsch.fake@jeffpitschconsulting.com> wrote on 23 okt 2008 in microsoft.public.windows.terminal_services: > You can if you assign in their user account or gpo a dummy > application to start at logon. This will not affect the > remoteapp capability but it will prevent the user from starting > a full desktop. run something like logoff.exe or something like > that and you are golden. > > Jeff Pitsch > Microsoft MVP - Terminal Services > > Blake wrote: >> I've read in some places where I can give a user access to a >> RemoteApp WITHOUT giving them full remote desktop. I've also >> read the opposite. >> >> Can I give someone the ability to use RemoteApp (Windows 2008 >> TS server, obviously) without giving them the ability to >> actually log into a full fledged deskop via RDP? >> >> ie - I'd like to keep them off the desktop for security >> reasons. >> >> Thanks >> Blkae
Guest Blake Posted October 24, 2008 Posted October 24, 2008 Re: RemoteApp vs. full Remote Desktop Thanks (to both of you) Blake "Vera Noest [MVP]" <vera.noest@remove-this.hem.utfors.se> wrote in message news:Xns9B40F26FDA5D7veranoesthemutforsse@207.46.248.16... > But keep in mind that it is trivial to get to the full desktop (or > run any application) from within nearly every application. > > _________________________________________________________ > Vera Noest > MCSE, CCEA, Microsoft MVP - Terminal Server > TS troubleshooting: http://ts.veranoest.net > ___ please respond in newsgroup, NOT by private email ___ > > Jeff Pitsch <jeff.pitsch.fake@jeffpitschconsulting.com> wrote on > 23 okt 2008 in microsoft.public.windows.terminal_services: > >> You can if you assign in their user account or gpo a dummy >> application to start at logon. This will not affect the >> remoteapp capability but it will prevent the user from starting >> a full desktop. run something like logoff.exe or something like >> that and you are golden. >> >> Jeff Pitsch >> Microsoft MVP - Terminal Services >> >> Blake wrote: >>> I've read in some places where I can give a user access to a >>> RemoteApp WITHOUT giving them full remote desktop. I've also >>> read the opposite. >>> >>> Can I give someone the ability to use RemoteApp (Windows 2008 >>> TS server, obviously) without giving them the ability to >>> actually log into a full fledged deskop via RDP? >>> >>> ie - I'd like to keep them off the desktop for security >>> reasons. >>> >>> Thanks >>> Blkae
Recommended Posts