Securing TS - Wndows 2000

[Guest Andrew Story]

Hello NG,

 

Can you let me know if it is possible to restrict application access via TS

please? We have some external users that will be using the TS Web client.

Idealy we want them to only have access to 3-4 apps/shortcuts on the

desktop, and no access to anything else, but need them to be able to save to

the desktop.

 

Any help much appreciated.

[Guest Jeff Pitsch]

Re: Securing TS - Wndows 2000

 

Win2k is extremely limited on what you can do. Win2k3 has much better

tools. I would recommend a 3rd party solution to control application

access. othewise your pretty much limited to NTFS permissions.

 

Jeff Pitsch

Microsoft MVP - Terminal Server

Citrix Technology Professional

Provision Networks VIP

 

Forums not enough?

Get support from the experts at your business

http://jeffpitschconsulting.com

 

Andrew Story wrote:

> Hello NG,

>

> Can you let me know if it is possible to restrict application access via TS

> please? We have some external users that will be using the TS Web client.

> Idealy we want them to only have access to 3-4 apps/shortcuts on the

> desktop, and no access to anything else, but need them to be able to save to

> the desktop.

>

> Any help much appreciated.

>

>

[Guest Cláudio Rodrigues [MVP]]

Re: Securing TS - Wndows 2000

 

Jeff Pitsch wrote:

> Win2k is extremely limited on what you can do. Win2k3 has much better

> tools. I would recommend a 3rd party solution to control application

> access. othewise your pretty much limited to NTFS permissions.

>

> Jeff Pitsch

> Microsoft MVP - Terminal Server

> Citrix Technology Professional

> Provision Networks VIP

>

> Forums not enough?

> Get support from the experts at your business

> http://jeffpitschconsulting.com

>

> Andrew Story wrote:

>> Hello NG,

>>

>> Can you let me know if it is possible to restrict application access

>> via TS please? We have some external users that will be using the TS

>> Web client. Idealy we want them to only have access to 3-4

>> apps/shortcuts on the desktop, and no access to anything else, but

>> need them to be able to save to the desktop.

>>

>> Any help much appreciated.

>>

 

Well group policies still apply and work in Windows 2000. :-)

So for sure he can use Folder Redirection to redirect the start menu

and/or Desktop and lock it down extremely well. Add NTFS permissions on

top and you can indeed have a functional desktop, locked down, with only

the icons he needs.

 

--

Cláudio Rodrigues

CEO, TSFactory Inc.

 

Microsoft MVP

Windows Server - Terminal Services

http://www.tsfactory.com

[Guest ThomasT.]

Re: Securing TS - Wndows 2000

 

Hi,

 

This can help, but not sure about the saving to the desktop:

http://www.mqtechnologies.com/Products/RAC20/

 

Thomas

 

"Andrew Story" <AndrewDOTstoryATjameswalkerBOTbiz> wrote in message

news:%23oGZNN7wHHA.4588@TK2MSFTNGP03.phx.gbl...

> Hello NG,

>

> Can you let me know if it is possible to restrict application access via

> TS please? We have some external users that will be using the TS Web

> client. Idealy we want them to only have access to 3-4 apps/shortcuts on

> the desktop, and no access to anything else, but need them to be able to

> save to the desktop.

>

> Any help much appreciated.

>

[Guest Andrew Story]

Re: Securing TS - Wndows 2000

 

thanks for the ideas.

 

I ended up using an application called appsec.exe from the win2k resource

kit. It allows you to block application access using windows2k terminal

services, works a treat.

 

 

 

 

""Cláudio Rodrigues [MVP]"" <CR@NOSPAM-TSFactory.ca> wrote in message

news:u117dB%23wHHA.4172@TK2MSFTNGP04.phx.gbl...

> Jeff Pitsch wrote:

>> Win2k is extremely limited on what you can do. Win2k3 has much better

>> tools. I would recommend a 3rd party solution to control application

>> access. othewise your pretty much limited to NTFS permissions.

>>

>> Jeff Pitsch

>> Microsoft MVP - Terminal Server

>> Citrix Technology Professional

>> Provision Networks VIP

>>

>> Forums not enough?

>> Get support from the experts at your business

>> http://jeffpitschconsulting.com

>>

>> Andrew Story wrote:

>>> Hello NG,

>>>

>>> Can you let me know if it is possible to restrict application access via

>>> TS please? We have some external users that will be using the TS Web

>>> client. Idealy we want them to only have access to 3-4 apps/shortcuts on

>>> the desktop, and no access to anything else, but need them to be able to

>>> save to the desktop.

>>>

>>> Any help much appreciated.

>>>

>

> Well group policies still apply and work in Windows 2000. :-)

> So for sure he can use Folder Redirection to redirect the start menu

> and/or Desktop and lock it down extremely well. Add NTFS permissions on

> top and you can indeed have a functional desktop, locked down, with only

> the icons he needs.

>

> --

> Cláudio Rodrigues

> CEO, TSFactory Inc.

>

> Microsoft MVP

> Windows Server - Terminal Services

> http://www.tsfactory.com

[Guest Jeff Pitsch]

Re: Securing TS - Wndows 2000

 

yea, I left that out due to the extemely limited use it has. You'll

discover the limitations soon enough I'm sure.

 

 

 

Andrew Story wrote:

> thanks for the ideas.

>

> I ended up using an application called appsec.exe from the win2k resource

> kit. It allows you to block application access using windows2k terminal

> services, works a treat.

>

>

>

>

> ""Cláudio Rodrigues [MVP]"" <CR@NOSPAM-TSFactory.ca> wrote in message

> news:u117dB%23wHHA.4172@TK2MSFTNGP04.phx.gbl...

>> Jeff Pitsch wrote:

>>> Win2k is extremely limited on what you can do. Win2k3 has much better

>>> tools. I would recommend a 3rd party solution to control application

>>> access. othewise your pretty much limited to NTFS permissions.

>>>

>>> Jeff Pitsch

>>> Microsoft MVP - Terminal Server

>>> Citrix Technology Professional

>>> Provision Networks VIP

>>>

>>> Forums not enough?

>>> Get support from the experts at your business

>>> http://jeffpitschconsulting.com

>>>

>>> Andrew Story wrote:

>>>> Hello NG,

>>>>

>>>> Can you let me know if it is possible to restrict application access via

>>>> TS please? We have some external users that will be using the TS Web

>>>> client. Idealy we want them to only have access to 3-4 apps/shortcuts on

>>>> the desktop, and no access to anything else, but need them to be able to

>>>> save to the desktop.

>>>>

>>>> Any help much appreciated.

>>>>

>> Well group policies still apply and work in Windows 2000. :-)

>> So for sure he can use Folder Redirection to redirect the start menu

>> and/or Desktop and lock it down extremely well. Add NTFS permissions on

>> top and you can indeed have a functional desktop, locked down, with only

>> the icons he needs.

>>

>> --

>> Cláudio Rodrigues

>> CEO, TSFactory Inc.

>>

>> Microsoft MVP

>> Windows Server - Terminal Services

>> http://www.tsfactory.com

>

>