Guest sihfmis Posted August 17, 2007 Posted August 17, 2007 I am at a point where I am really confused. I am trying to setup a TS test user that will access specific applications (ie-MS Office Suite). Does anyone have a good example of what the GP setup would look like? Or, is it controlled somewhere else? If so, where and what does it look like?
Guest Vera Noest [MVP] Posted August 17, 2007 Posted August 17, 2007 Re: TS Profiles ??? What exactly is it that you want to do? You can define a Terminal Services specific roaming profile for users (in their AD user account or in a Group Policy), but that is most useful when users log on to several load balanced Terminal Servers, and to preserve disk space on the TS. You can define a custom Desktop and Start Menu (in a Group Policy), which is most useful to enhance the user experience (they see only what they need to see), but it doesn't provide security. You can limit access to the file system with NTFS permissions to keep users out of sensitive areas of the server. You can define a Starting application (in the rdp client, a Group Policy or on the TS) if the user needs to run a single application only. _________________________________________________________ Vera Noest MCSE, CCEA, Microsoft MVP - Terminal Server TS troubleshooting: http://ts.veranoest.net ___ please respond in newsgroup, NOT by private email ___ =?Utf-8?B?c2loZm1pcw==?= <sihfmis@discussions.microsoft.com> wrote on 17 aug 2007 in microsoft.public.windows.terminal_services: > I am at a point where I am really confused. I am trying to > setup a TS test user that will access specific applications > (ie-MS Office Suite). Does anyone have a good example of what > the GP setup would look like? Or, is it controlled somewhere > else? If so, where and what does it look like?
Guest sihfmis Posted August 20, 2007 Posted August 20, 2007 Re: TS Profiles ??? The part about "custom desktop and startup menu", what would that look like? This is where I run into confusion. What would a typical configuration look like? "Vera Noest [MVP]" wrote: > What exactly is it that you want to do? > > You can define a Terminal Services specific roaming profile for users > (in their AD user account or in a Group Policy), but that is most > useful when users log on to several load balanced Terminal Servers, > and to preserve disk space on the TS. > You can define a custom Desktop and Start Menu (in a Group Policy), > which is most useful to enhance the user experience (they see only > what they need to see), but it doesn't provide security. > You can limit access to the file system with NTFS permissions to keep > users out of sensitive areas of the server. > You can define a Starting application (in the rdp client, a Group > Policy or on the TS) if the user needs to run a single application > only. > > _________________________________________________________ > Vera Noest > MCSE, CCEA, Microsoft MVP - Terminal Server > TS troubleshooting: http://ts.veranoest.net > ___ please respond in newsgroup, NOT by private email ___ > > =?Utf-8?B?c2loZm1pcw==?= <sihfmis@discussions.microsoft.com> wrote > on 17 aug 2007 in microsoft.public.windows.terminal_services: > > > I am at a point where I am really confused. I am trying to > > setup a TS test user that will access specific applications > > (ie-MS Office Suite). Does anyone have a good example of what > > the GP setup would look like? Or, is it controlled somewhere > > else? If so, where and what does it look like? >
Guest Vera Noest [MVP] Posted August 20, 2007 Posted August 20, 2007 Re: TS Profiles ??? When you use a Group Policy to configure a custom Start Menu and Desktop, you simply redirect those two features to 2 empty folders on a file share. Then it's up to you to populate the folders. For example: if you want your users to have only Notepad and Calculator shortcuts in their Start Menu, then you only copy those shortcuts to your custom Start Menu. Same with the desktop folder: you start with an empty folder and put only those shortcuts in it that you want your users to have easy access to. _________________________________________________________ Vera Noest MCSE, CCEA, Microsoft MVP - Terminal Server TS troubleshooting: http://ts.veranoest.net *----------- Please reply in newsgroup -------------* =?Utf-8?B?c2loZm1pcw==?= <sihfmis@discussions.microsoft.com> wrote on 20 aug 2007: > The part about "custom desktop and startup menu", what would > that look like? This is where I run into confusion. What would > a typical configuration look like? > > "Vera Noest [MVP]" wrote: > >> What exactly is it that you want to do? >> >> You can define a Terminal Services specific roaming profile for >> users (in their AD user account or in a Group Policy), but that >> is most useful when users log on to several load balanced >> Terminal Servers, and to preserve disk space on the TS. >> You can define a custom Desktop and Start Menu (in a Group >> Policy), which is most useful to enhance the user experience >> (they see only what they need to see), but it doesn't provide >> security. You can limit access to the file system with NTFS >> permissions to keep users out of sensitive areas of the server. >> You can define a Starting application (in the rdp client, a >> Group Policy or on the TS) if the user needs to run a single >> application only. >> >> _________________________________________________________ >> Vera Noest >> MCSE, CCEA, Microsoft MVP - Terminal Server >> TS troubleshooting: http://ts.veranoest.net >> ___ please respond in newsgroup, NOT by private email ___ >> >> =?Utf-8?B?c2loZm1pcw==?= <sihfmis@discussions.microsoft.com> >> wrote on 17 aug 2007 in >> microsoft.public.windows.terminal_services: >> >> > I am at a point where I am really confused. I am trying to >> > setup a TS test user that will access specific applications >> > (ie-MS Office Suite). Does anyone have a good example of >> > what the GP setup would look like? Or, is it controlled >> > somewhere else? If so, where and what does it look like?
Guest sihfmis Posted August 20, 2007 Posted August 20, 2007 Re: TS Profiles ??? Okay but what about the items that come through the "all users" properties? This is where I am getting tripped up. "Vera Noest [MVP]" wrote: > When you use a Group Policy to configure a custom Start Menu and > Desktop, you simply redirect those two features to 2 empty folders > on a file share. > Then it's up to you to populate the folders. > For example: if you want your users to have only Notepad and > Calculator shortcuts in their Start Menu, then you only copy those > shortcuts to your custom Start Menu. Same with the desktop folder: > you start with an empty folder and put only those shortcuts in it > that you want your users to have easy access to. > > _________________________________________________________ > Vera Noest > MCSE, CCEA, Microsoft MVP - Terminal Server > TS troubleshooting: http://ts.veranoest.net > *----------- Please reply in newsgroup -------------* > > =?Utf-8?B?c2loZm1pcw==?= <sihfmis@discussions.microsoft.com> wrote > on 20 aug 2007: > > > The part about "custom desktop and startup menu", what would > > that look like? This is where I run into confusion. What would > > a typical configuration look like? > > > > "Vera Noest [MVP]" wrote: > > > >> What exactly is it that you want to do? > >> > >> You can define a Terminal Services specific roaming profile for > >> users (in their AD user account or in a Group Policy), but that > >> is most useful when users log on to several load balanced > >> Terminal Servers, and to preserve disk space on the TS. > >> You can define a custom Desktop and Start Menu (in a Group > >> Policy), which is most useful to enhance the user experience > >> (they see only what they need to see), but it doesn't provide > >> security. You can limit access to the file system with NTFS > >> permissions to keep users out of sensitive areas of the server. > >> You can define a Starting application (in the rdp client, a > >> Group Policy or on the TS) if the user needs to run a single > >> application only. > >> > >> _________________________________________________________ > >> Vera Noest > >> MCSE, CCEA, Microsoft MVP - Terminal Server > >> TS troubleshooting: http://ts.veranoest.net > >> ___ please respond in newsgroup, NOT by private email ___ > >> > >> =?Utf-8?B?c2loZm1pcw==?= <sihfmis@discussions.microsoft.com> > >> wrote on 17 aug 2007 in > >> microsoft.public.windows.terminal_services: > >> > >> > I am at a point where I am really confused. I am trying to > >> > setup a TS test user that will access specific applications > >> > (ie-MS Office Suite). Does anyone have a good example of > >> > what the GP setup would look like? Or, is it controlled > >> > somewhere else? If so, where and what does it look like? >
Guest Vera Noest [MVP] Posted August 20, 2007 Posted August 20, 2007 Re: TS Profiles ??? Can't you just delete the ones you don't want from C:\Documents and Settings\All Users\Start Menu? _________________________________________________________ Vera Noest MCSE, CCEA, Microsoft MVP - Terminal Server TS troubleshooting: http://ts.veranoest.net ___ please respond in newsgroup, NOT by private email ___ =?Utf-8?B?c2loZm1pcw==?= <sihfmis@discussions.microsoft.com> wrote on 20 aug 2007 in microsoft.public.windows.terminal_services: > Okay but what about the items that come through the "all users" > properties? This is where I am getting tripped up. > > "Vera Noest [MVP]" wrote: > >> When you use a Group Policy to configure a custom Start Menu >> and Desktop, you simply redirect those two features to 2 empty >> folders on a file share. >> Then it's up to you to populate the folders. >> For example: if you want your users to have only Notepad and >> Calculator shortcuts in their Start Menu, then you only copy >> those shortcuts to your custom Start Menu. Same with the >> desktop folder: you start with an empty folder and put only >> those shortcuts in it that you want your users to have easy >> access to. >> >> _________________________________________________________ >> Vera Noest >> MCSE, CCEA, Microsoft MVP - Terminal Server >> TS troubleshooting: http://ts.veranoest.net >> *----------- Please reply in newsgroup -------------* >> >> =?Utf-8?B?c2loZm1pcw==?= <sihfmis@discussions.microsoft.com> >> wrote on 20 aug 2007: >> >> > The part about "custom desktop and startup menu", what would >> > that look like? This is where I run into confusion. What >> > would a typical configuration look like? >> > >> > "Vera Noest [MVP]" wrote: >> > >> >> What exactly is it that you want to do? >> >> >> >> You can define a Terminal Services specific roaming profile >> >> for users (in their AD user account or in a Group Policy), >> >> but that is most useful when users log on to several load >> >> balanced Terminal Servers, and to preserve disk space on the >> >> TS. You can define a custom Desktop and Start Menu (in a >> >> Group Policy), which is most useful to enhance the user >> >> experience (they see only what they need to see), but it >> >> doesn't provide security. You can limit access to the file >> >> system with NTFS permissions to keep users out of sensitive >> >> areas of the server. You can define a Starting application >> >> (in the rdp client, a Group Policy or on the TS) if the user >> >> needs to run a single application only. >> >> >> >> _________________________________________________________ >> >> Vera Noest >> >> MCSE, CCEA, Microsoft MVP - Terminal Server >> >> TS troubleshooting: http://ts.veranoest.net >> >> ___ please respond in newsgroup, NOT by private email ___ >> >> >> >> =?Utf-8?B?c2loZm1pcw==?= <sihfmis@discussions.microsoft.com> >> >> wrote on 17 aug 2007 in >> >> microsoft.public.windows.terminal_services: >> >> >> >> > I am at a point where I am really confused. I am trying >> >> > to setup a TS test user that will access specific >> >> > applications (ie-MS Office Suite). Does anyone have a >> >> > good example of what the GP setup would look like? Or, is >> >> > it controlled somewhere else? If so, where and what does >> >> > it look like?
Guest sihfmis Posted August 20, 2007 Posted August 20, 2007 Re: TS Profiles ??? I do not know, I will try it. "Vera Noest [MVP]" wrote: > Can't you just delete the ones you don't want from > C:\Documents and Settings\All Users\Start Menu? > _________________________________________________________ > Vera Noest > MCSE, CCEA, Microsoft MVP - Terminal Server > TS troubleshooting: http://ts.veranoest.net > ___ please respond in newsgroup, NOT by private email ___ > > =?Utf-8?B?c2loZm1pcw==?= <sihfmis@discussions.microsoft.com> wrote > on 20 aug 2007 in microsoft.public.windows.terminal_services: > > > Okay but what about the items that come through the "all users" > > properties? This is where I am getting tripped up. > > > > "Vera Noest [MVP]" wrote: > > > >> When you use a Group Policy to configure a custom Start Menu > >> and Desktop, you simply redirect those two features to 2 empty > >> folders on a file share. > >> Then it's up to you to populate the folders. > >> For example: if you want your users to have only Notepad and > >> Calculator shortcuts in their Start Menu, then you only copy > >> those shortcuts to your custom Start Menu. Same with the > >> desktop folder: you start with an empty folder and put only > >> those shortcuts in it that you want your users to have easy > >> access to. > >> > >> _________________________________________________________ > >> Vera Noest > >> MCSE, CCEA, Microsoft MVP - Terminal Server > >> TS troubleshooting: http://ts.veranoest.net > >> *----------- Please reply in newsgroup -------------* > >> > >> =?Utf-8?B?c2loZm1pcw==?= <sihfmis@discussions.microsoft.com> > >> wrote on 20 aug 2007: > >> > >> > The part about "custom desktop and startup menu", what would > >> > that look like? This is where I run into confusion. What > >> > would a typical configuration look like? > >> > > >> > "Vera Noest [MVP]" wrote: > >> > > >> >> What exactly is it that you want to do? > >> >> > >> >> You can define a Terminal Services specific roaming profile > >> >> for users (in their AD user account or in a Group Policy), > >> >> but that is most useful when users log on to several load > >> >> balanced Terminal Servers, and to preserve disk space on the > >> >> TS. You can define a custom Desktop and Start Menu (in a > >> >> Group Policy), which is most useful to enhance the user > >> >> experience (they see only what they need to see), but it > >> >> doesn't provide security. You can limit access to the file > >> >> system with NTFS permissions to keep users out of sensitive > >> >> areas of the server. You can define a Starting application > >> >> (in the rdp client, a Group Policy or on the TS) if the user > >> >> needs to run a single application only. > >> >> > >> >> _________________________________________________________ > >> >> Vera Noest > >> >> MCSE, CCEA, Microsoft MVP - Terminal Server > >> >> TS troubleshooting: http://ts.veranoest.net > >> >> ___ please respond in newsgroup, NOT by private email ___ > >> >> > >> >> =?Utf-8?B?c2loZm1pcw==?= <sihfmis@discussions.microsoft.com> > >> >> wrote on 17 aug 2007 in > >> >> microsoft.public.windows.terminal_services: > >> >> > >> >> > I am at a point where I am really confused. I am trying > >> >> > to setup a TS test user that will access specific > >> >> > applications (ie-MS Office Suite). Does anyone have a > >> >> > good example of what the GP setup would look like? Or, is > >> >> > it controlled somewhere else? If so, where and what does > >> >> > it look like? >
Recommended Posts