Terminal Services/SBS- Adding Users & Managing Desktops

[Guest compsosinc@gmail.com]

We are going to be installing TS2003 on a Windows 2003 Server Standard

Edition. This server is currently a file server in an SBS2000 domain

(not SBS2003).

 

1. The client machines are going to be setup on a factory floor, and

for simplicity, there will be just one user per machine. These

users(DC1, DC2, DC3, etc) have never been added to the domain and only

need to access the TS for a data collection program. Do we add the

users to the Active Directory on the SBS2000 box or within the TS

Local Users & Groups as members of the Remote Desktop Users? Note,

these users may need to access CAD files that are on the DC through a

mapped drive. All usrs will have the same permissions.

 

2. When a TS user establishes a connection to the TS, how can we only

give them an icon & Start>Programs list only for the program(s) they

will be using rather than the desktop that is used for administration.

If this is through Group Policy, is this Policy set on the TS or the

DC and does anyone have any link to specific articles/tutorials for

setting this up. The desktop should be the same for all client

machines.

 

Thanks

[Guest Jeff Pitsch]

Re: Terminal Services/SBS- Adding Users & Managing Desktops

 

See inline

 

Jeff Pitsch

Microsoft MVP - Terminal Server

Citrix Technology Professional

Provision Networks VIP

 

Forums not enough?

Get support from the experts at your business

http://jeffpitschconsulting.com

 

compsosinc@gmail.com wrote:

> We are going to be installing TS2003 on a Windows 2003 Server Standard

> Edition. This server is currently a file server in an SBS2000 domain

> (not SBS2003).

>

> 1. The client machines are going to be setup on a factory floor, and

> for simplicity, there will be just one user per machine. These

> users(DC1, DC2, DC3, etc) have never been added to the domain and only

> need to access the TS for a data collection program. Do we add the

> users to the Active Directory on the SBS2000 box or within the TS

> Local Users & Groups as members of the Remote Desktop Users? Note,

> these users may need to access CAD files that are on the DC through a

> mapped drive. All usrs will have the same permissions.

 

I think you'll be happier having them in the domain. you can control

their access to the server resources with Group policy.

>

> 2. When a TS user establishes a connection to the TS, how can we only

> give them an icon & Start>Programs list only for the program(s) they

> will be using rather than the desktop that is used for administration.

> If this is through Group Policy, is this Policy set on the TS or the

> DC and does anyone have any link to specific articles/tutorials for

> setting this up. The desktop should be the same for all client

> machines.

 

You can use Group Policy and folder redirection (part of Group Policy)

to control this. i would lock down using GPO and redirect the start

menu and desktop so that they only see what you want them to see.

http://www.jeffpitschconsulting.com/downloads.aspx?c=13&type=download

see my whitepaper on Understanding Group Policy in a TS environment.

>

> Thanks

>

[Guest Vera Noest [MVP]]

Re: Terminal Services/SBS- Adding Users & Managing Desktops

 

By all means, create AD accounts. Local accounts only create more

administrative overhead and permission problems.

 

You can use a policy with Folder redirection to create a customized

Desktop and Start Menu for these users.

You will need to do this with a policy created on the DC, and link

the policy to the OU which contains the Terminal Server (create a

separate OU for this purpose).

 

You'll find the settings here:

User Configuration - Windows Settings - Folder Redirection

Application Data

Desktop

My Documents

Start Menu

 

You can also manually remove all unneccessary icons from the "All

Users" profile on the Terminal Server.

 

To ensure that the olicy only applies to users when they connect to

the TS and not on their workstations, make sure that you also

configure the policy with "loopback processing":

 

Computer Configuration - Administrative Templates - System - Group

Policy

"User Group Policy loopback processing mode" - "Replace"

_________________________________________________________

Vera Noest

MCSE, CCEA, Microsoft MVP - Terminal Server

TS troubleshooting: http://ts.veranoest.net

___ please respond in newsgroup, NOT by private email ___

 

compsosinc@gmail.com wrote on 13 sep 2007 in

microsoft.public.windows.terminal_services:

> We are going to be installing TS2003 on a Windows 2003 Server

> Standard Edition. This server is currently a file server in an

> SBS2000 domain (not SBS2003).

>

> 1. The client machines are going to be setup on a factory floor,

> and for simplicity, there will be just one user per machine.

> These users(DC1, DC2, DC3, etc) have never been added to the

> domain and only need to access the TS for a data collection

> program. Do we add the users to the Active Directory on the

> SBS2000 box or within the TS Local Users & Groups as members of

> the Remote Desktop Users? Note, these users may need to access

> CAD files that are on the DC through a mapped drive. All usrs

> will have the same permissions.

>

> 2. When a TS user establishes a connection to the TS, how can we

> only give them an icon & Start>Programs list only for the

> program(s) they will be using rather than the desktop that is

> used for administration. If this is through Group Policy, is

> this Policy set on the TS or the DC and does anyone have any

> link to specific articles/tutorials for setting this up. The

> desktop should be the same for all client machines.

>

> Thanks