Guest Andrew Story Posted July 11, 2007 Posted July 11, 2007 Hello NG, Can you let me know if it is possible to restrict application access via TS please? We have some external users that will be using the TS Web client. Idealy we want them to only have access to 3-4 apps/shortcuts on the desktop, and no access to anything else, but need them to be able to save to the desktop. Any help much appreciated.
Guest Jeff Pitsch Posted July 11, 2007 Posted July 11, 2007 Re: Securing TS - Wndows 2000 Win2k is extremely limited on what you can do. Win2k3 has much better tools. I would recommend a 3rd party solution to control application access. othewise your pretty much limited to NTFS permissions. Jeff Pitsch Microsoft MVP - Terminal Server Citrix Technology Professional Provision Networks VIP Forums not enough? Get support from the experts at your business http://jeffpitschconsulting.com Andrew Story wrote: > Hello NG, > > Can you let me know if it is possible to restrict application access via TS > please? We have some external users that will be using the TS Web client. > Idealy we want them to only have access to 3-4 apps/shortcuts on the > desktop, and no access to anything else, but need them to be able to save to > the desktop. > > Any help much appreciated. > >
Guest Cláudio Rodrigues [MVP] Posted July 11, 2007 Posted July 11, 2007 Re: Securing TS - Wndows 2000 Jeff Pitsch wrote: > Win2k is extremely limited on what you can do. Win2k3 has much better > tools. I would recommend a 3rd party solution to control application > access. othewise your pretty much limited to NTFS permissions. > > Jeff Pitsch > Microsoft MVP - Terminal Server > Citrix Technology Professional > Provision Networks VIP > > Forums not enough? > Get support from the experts at your business > http://jeffpitschconsulting.com > > Andrew Story wrote: >> Hello NG, >> >> Can you let me know if it is possible to restrict application access >> via TS please? We have some external users that will be using the TS >> Web client. Idealy we want them to only have access to 3-4 >> apps/shortcuts on the desktop, and no access to anything else, but >> need them to be able to save to the desktop. >> >> Any help much appreciated. >> Well group policies still apply and work in Windows 2000. :-) So for sure he can use Folder Redirection to redirect the start menu and/or Desktop and lock it down extremely well. Add NTFS permissions on top and you can indeed have a functional desktop, locked down, with only the icons he needs. -- Cláudio Rodrigues CEO, TSFactory Inc. Microsoft MVP Windows Server - Terminal Services http://www.tsfactory.com
Guest ThomasT. Posted July 11, 2007 Posted July 11, 2007 Re: Securing TS - Wndows 2000 Hi, This can help, but not sure about the saving to the desktop: http://www.mqtechnologies.com/Products/RAC20/ Thomas "Andrew Story" <AndrewDOTstoryATjameswalkerBOTbiz> wrote in message news:%23oGZNN7wHHA.4588@TK2MSFTNGP03.phx.gbl... > Hello NG, > > Can you let me know if it is possible to restrict application access via > TS please? We have some external users that will be using the TS Web > client. Idealy we want them to only have access to 3-4 apps/shortcuts on > the desktop, and no access to anything else, but need them to be able to > save to the desktop. > > Any help much appreciated. >
Guest Andrew Story Posted July 13, 2007 Posted July 13, 2007 Re: Securing TS - Wndows 2000 thanks for the ideas. I ended up using an application called appsec.exe from the win2k resource kit. It allows you to block application access using windows2k terminal services, works a treat. ""Cláudio Rodrigues [MVP]"" <CR@NOSPAM-TSFactory.ca> wrote in message news:u117dB%23wHHA.4172@TK2MSFTNGP04.phx.gbl... > Jeff Pitsch wrote: >> Win2k is extremely limited on what you can do. Win2k3 has much better >> tools. I would recommend a 3rd party solution to control application >> access. othewise your pretty much limited to NTFS permissions. >> >> Jeff Pitsch >> Microsoft MVP - Terminal Server >> Citrix Technology Professional >> Provision Networks VIP >> >> Forums not enough? >> Get support from the experts at your business >> http://jeffpitschconsulting.com >> >> Andrew Story wrote: >>> Hello NG, >>> >>> Can you let me know if it is possible to restrict application access via >>> TS please? We have some external users that will be using the TS Web >>> client. Idealy we want them to only have access to 3-4 apps/shortcuts on >>> the desktop, and no access to anything else, but need them to be able to >>> save to the desktop. >>> >>> Any help much appreciated. >>> > > Well group policies still apply and work in Windows 2000. :-) > So for sure he can use Folder Redirection to redirect the start menu > and/or Desktop and lock it down extremely well. Add NTFS permissions on > top and you can indeed have a functional desktop, locked down, with only > the icons he needs. > > -- > Cláudio Rodrigues > CEO, TSFactory Inc. > > Microsoft MVP > Windows Server - Terminal Services > http://www.tsfactory.com
Guest Jeff Pitsch Posted July 14, 2007 Posted July 14, 2007 Re: Securing TS - Wndows 2000 yea, I left that out due to the extemely limited use it has. You'll discover the limitations soon enough I'm sure. Andrew Story wrote: > thanks for the ideas. > > I ended up using an application called appsec.exe from the win2k resource > kit. It allows you to block application access using windows2k terminal > services, works a treat. > > > > > ""Cláudio Rodrigues [MVP]"" <CR@NOSPAM-TSFactory.ca> wrote in message > news:u117dB%23wHHA.4172@TK2MSFTNGP04.phx.gbl... >> Jeff Pitsch wrote: >>> Win2k is extremely limited on what you can do. Win2k3 has much better >>> tools. I would recommend a 3rd party solution to control application >>> access. othewise your pretty much limited to NTFS permissions. >>> >>> Jeff Pitsch >>> Microsoft MVP - Terminal Server >>> Citrix Technology Professional >>> Provision Networks VIP >>> >>> Forums not enough? >>> Get support from the experts at your business >>> http://jeffpitschconsulting.com >>> >>> Andrew Story wrote: >>>> Hello NG, >>>> >>>> Can you let me know if it is possible to restrict application access via >>>> TS please? We have some external users that will be using the TS Web >>>> client. Idealy we want them to only have access to 3-4 apps/shortcuts on >>>> the desktop, and no access to anything else, but need them to be able to >>>> save to the desktop. >>>> >>>> Any help much appreciated. >>>> >> Well group policies still apply and work in Windows 2000. :-) >> So for sure he can use Folder Redirection to redirect the start menu >> and/or Desktop and lock it down extremely well. Add NTFS permissions on >> top and you can indeed have a functional desktop, locked down, with only >> the icons he needs. >> >> -- >> Cláudio Rodrigues >> CEO, TSFactory Inc. >> >> Microsoft MVP >> Windows Server - Terminal Services >> http://www.tsfactory.com > >
Recommended Posts