TS Profiles ???

[Guest sihfmis]

I am at a point where I am really confused. I am trying to setup a TS test

user that will access specific applications (ie-MS Office Suite). Does

anyone have a good example of what the GP setup would look like? Or, is it

controlled somewhere else? If so, where and what does it look like?

[Guest Vera Noest [MVP]]

Re: TS Profiles ???

 

What exactly is it that you want to do?

 

You can define a Terminal Services specific roaming profile for users

(in their AD user account or in a Group Policy), but that is most

useful when users log on to several load balanced Terminal Servers,

and to preserve disk space on the TS.

You can define a custom Desktop and Start Menu (in a Group Policy),

which is most useful to enhance the user experience (they see only

what they need to see), but it doesn't provide security.

You can limit access to the file system with NTFS permissions to keep

users out of sensitive areas of the server.

You can define a Starting application (in the rdp client, a Group

Policy or on the TS) if the user needs to run a single application

only.

 

_________________________________________________________

Vera Noest

MCSE, CCEA, Microsoft MVP - Terminal Server

TS troubleshooting: http://ts.veranoest.net

___ please respond in newsgroup, NOT by private email ___

 

=?Utf-8?B?c2loZm1pcw==?= <sihfmis@discussions.microsoft.com> wrote

on 17 aug 2007 in microsoft.public.windows.terminal_services:

> I am at a point where I am really confused. I am trying to

> setup a TS test user that will access specific applications

> (ie-MS Office Suite). Does anyone have a good example of what

> the GP setup would look like? Or, is it controlled somewhere

> else? If so, where and what does it look like?

[Guest sihfmis]

Re: TS Profiles ???

 

The part about "custom desktop and startup menu", what would that look like?

This is where I run into confusion. What would a typical configuration look

like?

 

"Vera Noest [MVP]" wrote:

> What exactly is it that you want to do?

>

> You can define a Terminal Services specific roaming profile for users

> (in their AD user account or in a Group Policy), but that is most

> useful when users log on to several load balanced Terminal Servers,

> and to preserve disk space on the TS.

> You can define a custom Desktop and Start Menu (in a Group Policy),

> which is most useful to enhance the user experience (they see only

> what they need to see), but it doesn't provide security.

> You can limit access to the file system with NTFS permissions to keep

> users out of sensitive areas of the server.

> You can define a Starting application (in the rdp client, a Group

> Policy or on the TS) if the user needs to run a single application

> only.

>

> _________________________________________________________

> Vera Noest

> MCSE, CCEA, Microsoft MVP - Terminal Server

> TS troubleshooting: http://ts.veranoest.net

> ___ please respond in newsgroup, NOT by private email ___

>

> =?Utf-8?B?c2loZm1pcw==?= <sihfmis@discussions.microsoft.com> wrote

> on 17 aug 2007 in microsoft.public.windows.terminal_services:

>

> > I am at a point where I am really confused. I am trying to

> > setup a TS test user that will access specific applications

> > (ie-MS Office Suite). Does anyone have a good example of what

> > the GP setup would look like? Or, is it controlled somewhere

> > else? If so, where and what does it look like?

>

[Guest Vera Noest [MVP]]

Re: TS Profiles ???

 

When you use a Group Policy to configure a custom Start Menu and

Desktop, you simply redirect those two features to 2 empty folders

on a file share.

Then it's up to you to populate the folders.

For example: if you want your users to have only Notepad and

Calculator shortcuts in their Start Menu, then you only copy those

shortcuts to your custom Start Menu. Same with the desktop folder:

you start with an empty folder and put only those shortcuts in it

that you want your users to have easy access to.

 

_________________________________________________________

Vera Noest

MCSE, CCEA, Microsoft MVP - Terminal Server

TS troubleshooting: http://ts.veranoest.net

*----------- Please reply in newsgroup -------------*

 

=?Utf-8?B?c2loZm1pcw==?= <sihfmis@discussions.microsoft.com> wrote

on 20 aug 2007:

> The part about "custom desktop and startup menu", what would

> that look like? This is where I run into confusion. What would

> a typical configuration look like?

>

> "Vera Noest [MVP]" wrote:

>

>> What exactly is it that you want to do?

>>

>> You can define a Terminal Services specific roaming profile for

>> users (in their AD user account or in a Group Policy), but that

>> is most useful when users log on to several load balanced

>> Terminal Servers, and to preserve disk space on the TS.

>> You can define a custom Desktop and Start Menu (in a Group

>> Policy), which is most useful to enhance the user experience

>> (they see only what they need to see), but it doesn't provide

>> security. You can limit access to the file system with NTFS

>> permissions to keep users out of sensitive areas of the server.

>> You can define a Starting application (in the rdp client, a

>> Group Policy or on the TS) if the user needs to run a single

>> application only.

>>

>> _________________________________________________________

>> Vera Noest

>> MCSE, CCEA, Microsoft MVP - Terminal Server

>> TS troubleshooting: http://ts.veranoest.net

>> ___ please respond in newsgroup, NOT by private email ___

>>

>> =?Utf-8?B?c2loZm1pcw==?= <sihfmis@discussions.microsoft.com>

>> wrote on 17 aug 2007 in

>> microsoft.public.windows.terminal_services:

>>

>> > I am at a point where I am really confused. I am trying to

>> > setup a TS test user that will access specific applications

>> > (ie-MS Office Suite). Does anyone have a good example of

>> > what the GP setup would look like? Or, is it controlled

>> > somewhere else? If so, where and what does it look like?

[Guest sihfmis]

Re: TS Profiles ???

 

Okay but what about the items that come through the "all users" properties?

This is where I am getting tripped up.

 

"Vera Noest [MVP]" wrote:

> When you use a Group Policy to configure a custom Start Menu and

> Desktop, you simply redirect those two features to 2 empty folders

> on a file share.

> Then it's up to you to populate the folders.

> For example: if you want your users to have only Notepad and

> Calculator shortcuts in their Start Menu, then you only copy those

> shortcuts to your custom Start Menu. Same with the desktop folder:

> you start with an empty folder and put only those shortcuts in it

> that you want your users to have easy access to.

>

> _________________________________________________________

> Vera Noest

> MCSE, CCEA, Microsoft MVP - Terminal Server

> TS troubleshooting: http://ts.veranoest.net

> *----------- Please reply in newsgroup -------------*

>

> =?Utf-8?B?c2loZm1pcw==?= <sihfmis@discussions.microsoft.com> wrote

> on 20 aug 2007:

>

> > The part about "custom desktop and startup menu", what would

> > that look like? This is where I run into confusion. What would

> > a typical configuration look like?

> >

> > "Vera Noest [MVP]" wrote:

> >

> >> What exactly is it that you want to do?

> >>

> >> You can define a Terminal Services specific roaming profile for

> >> users (in their AD user account or in a Group Policy), but that

> >> is most useful when users log on to several load balanced

> >> Terminal Servers, and to preserve disk space on the TS.

> >> You can define a custom Desktop and Start Menu (in a Group

> >> Policy), which is most useful to enhance the user experience

> >> (they see only what they need to see), but it doesn't provide

> >> security. You can limit access to the file system with NTFS

> >> permissions to keep users out of sensitive areas of the server.

> >> You can define a Starting application (in the rdp client, a

> >> Group Policy or on the TS) if the user needs to run a single

> >> application only.

> >>

> >> _________________________________________________________

> >> Vera Noest

> >> MCSE, CCEA, Microsoft MVP - Terminal Server

> >> TS troubleshooting: http://ts.veranoest.net

> >> ___ please respond in newsgroup, NOT by private email ___

> >>

> >> =?Utf-8?B?c2loZm1pcw==?= <sihfmis@discussions.microsoft.com>

> >> wrote on 17 aug 2007 in

> >> microsoft.public.windows.terminal_services:

> >>

> >> > I am at a point where I am really confused. I am trying to

> >> > setup a TS test user that will access specific applications

> >> > (ie-MS Office Suite). Does anyone have a good example of

> >> > what the GP setup would look like? Or, is it controlled

> >> > somewhere else? If so, where and what does it look like?

>

[Guest Vera Noest [MVP]]

Re: TS Profiles ???

 

Can't you just delete the ones you don't want from

C:\Documents and Settings\All Users\Start Menu?

_________________________________________________________

Vera Noest

MCSE, CCEA, Microsoft MVP - Terminal Server

TS troubleshooting: http://ts.veranoest.net

___ please respond in newsgroup, NOT by private email ___

 

=?Utf-8?B?c2loZm1pcw==?= <sihfmis@discussions.microsoft.com> wrote

on 20 aug 2007 in microsoft.public.windows.terminal_services:

> Okay but what about the items that come through the "all users"

> properties? This is where I am getting tripped up.

>

> "Vera Noest [MVP]" wrote:

>

>> When you use a Group Policy to configure a custom Start Menu

>> and Desktop, you simply redirect those two features to 2 empty

>> folders on a file share.

>> Then it's up to you to populate the folders.

>> For example: if you want your users to have only Notepad and

>> Calculator shortcuts in their Start Menu, then you only copy

>> those shortcuts to your custom Start Menu. Same with the

>> desktop folder: you start with an empty folder and put only

>> those shortcuts in it that you want your users to have easy

>> access to.

>>

>> _________________________________________________________

>> Vera Noest

>> MCSE, CCEA, Microsoft MVP - Terminal Server

>> TS troubleshooting: http://ts.veranoest.net

>> *----------- Please reply in newsgroup -------------*

>>

>> =?Utf-8?B?c2loZm1pcw==?= <sihfmis@discussions.microsoft.com>

>> wrote on 20 aug 2007:

>>

>> > The part about "custom desktop and startup menu", what would

>> > that look like? This is where I run into confusion. What

>> > would a typical configuration look like?

>> >

>> > "Vera Noest [MVP]" wrote:

>> >

>> >> What exactly is it that you want to do?

>> >>

>> >> You can define a Terminal Services specific roaming profile

>> >> for users (in their AD user account or in a Group Policy),

>> >> but that is most useful when users log on to several load

>> >> balanced Terminal Servers, and to preserve disk space on the

>> >> TS. You can define a custom Desktop and Start Menu (in a

>> >> Group Policy), which is most useful to enhance the user

>> >> experience (they see only what they need to see), but it

>> >> doesn't provide security. You can limit access to the file

>> >> system with NTFS permissions to keep users out of sensitive

>> >> areas of the server. You can define a Starting application

>> >> (in the rdp client, a Group Policy or on the TS) if the user

>> >> needs to run a single application only.

>> >>

>> >> _________________________________________________________

>> >> Vera Noest

>> >> MCSE, CCEA, Microsoft MVP - Terminal Server

>> >> TS troubleshooting: http://ts.veranoest.net

>> >> ___ please respond in newsgroup, NOT by private email ___

>> >>

>> >> =?Utf-8?B?c2loZm1pcw==?= <sihfmis@discussions.microsoft.com>

>> >> wrote on 17 aug 2007 in

>> >> microsoft.public.windows.terminal_services:

>> >>

>> >> > I am at a point where I am really confused. I am trying

>> >> > to setup a TS test user that will access specific

>> >> > applications (ie-MS Office Suite). Does anyone have a

>> >> > good example of what the GP setup would look like? Or, is

>> >> > it controlled somewhere else? If so, where and what does

>> >> > it look like?

[Guest sihfmis]

Re: TS Profiles ???

 

I do not know, I will try it.

 

"Vera Noest [MVP]" wrote:

> Can't you just delete the ones you don't want from

> C:\Documents and Settings\All Users\Start Menu?

> _________________________________________________________

> Vera Noest

> MCSE, CCEA, Microsoft MVP - Terminal Server

> TS troubleshooting: http://ts.veranoest.net

> ___ please respond in newsgroup, NOT by private email ___

>

> =?Utf-8?B?c2loZm1pcw==?= <sihfmis@discussions.microsoft.com> wrote

> on 20 aug 2007 in microsoft.public.windows.terminal_services:

>

> > Okay but what about the items that come through the "all users"

> > properties? This is where I am getting tripped up.

> >

> > "Vera Noest [MVP]" wrote:

> >

> >> When you use a Group Policy to configure a custom Start Menu

> >> and Desktop, you simply redirect those two features to 2 empty

> >> folders on a file share.

> >> Then it's up to you to populate the folders.

> >> For example: if you want your users to have only Notepad and

> >> Calculator shortcuts in their Start Menu, then you only copy

> >> those shortcuts to your custom Start Menu. Same with the

> >> desktop folder: you start with an empty folder and put only

> >> those shortcuts in it that you want your users to have easy

> >> access to.

> >>

> >> _________________________________________________________

> >> Vera Noest

> >> MCSE, CCEA, Microsoft MVP - Terminal Server

> >> TS troubleshooting: http://ts.veranoest.net

> >> *----------- Please reply in newsgroup -------------*

> >>

> >> =?Utf-8?B?c2loZm1pcw==?= <sihfmis@discussions.microsoft.com>

> >> wrote on 20 aug 2007:

> >>

> >> > The part about "custom desktop and startup menu", what would

> >> > that look like? This is where I run into confusion. What

> >> > would a typical configuration look like?

> >> >

> >> > "Vera Noest [MVP]" wrote:

> >> >

> >> >> What exactly is it that you want to do?

> >> >>

> >> >> You can define a Terminal Services specific roaming profile

> >> >> for users (in their AD user account or in a Group Policy),

> >> >> but that is most useful when users log on to several load

> >> >> balanced Terminal Servers, and to preserve disk space on the

> >> >> TS. You can define a custom Desktop and Start Menu (in a

> >> >> Group Policy), which is most useful to enhance the user

> >> >> experience (they see only what they need to see), but it

> >> >> doesn't provide security. You can limit access to the file

> >> >> system with NTFS permissions to keep users out of sensitive

> >> >> areas of the server. You can define a Starting application

> >> >> (in the rdp client, a Group Policy or on the TS) if the user

> >> >> needs to run a single application only.

> >> >>

> >> >> _________________________________________________________

> >> >> Vera Noest

> >> >> MCSE, CCEA, Microsoft MVP - Terminal Server

> >> >> TS troubleshooting: http://ts.veranoest.net

> >> >> ___ please respond in newsgroup, NOT by private email ___

> >> >>

> >> >> =?Utf-8?B?c2loZm1pcw==?= <sihfmis@discussions.microsoft.com>

> >> >> wrote on 17 aug 2007 in

> >> >> microsoft.public.windows.terminal_services:

> >> >>

> >> >> > I am at a point where I am really confused. I am trying

> >> >> > to setup a TS test user that will access specific

> >> >> > applications (ie-MS Office Suite). Does anyone have a

> >> >> > good example of what the GP setup would look like? Or, is

> >> >> > it controlled somewhere else? If so, where and what does

> >> >> > it look like?

>