Starting a Program in TS

[Guest Luiz]

Hi,

 

I would like to know how can I configure a GPO for an Application starting

when the user log on the TS.

I can do that in RDP software, is that correct?

But how can I prohibit the user enter in to Desktop?

 

Thanks.

 

Luiz

[Guest Bart Van Vugt]

RE: Starting a Program in TS

 

You can specifiy the program that has to start in the RDP client in the

programs tab.

 

"Luiz" wrote:

> Hi,

>

> I would like to know how can I configure a GPO for an Application starting

> when the user log on the TS.

> I can do that in RDP software, is that correct?

> But how can I prohibit the user enter in to Desktop?

>

> Thanks.

>

> Luiz

[Guest Vera Noest [MVP]]

RE: Starting a Program in TS

 

Or in tscc.msc, but the OP specifically asked for the GPO setting.

You'll find the setting here:

 

Computer Configuration - Administrative templates - Windows

Components - Terminal Services

"Start a program on connection"

 

Note that the same setting is also present under the User

Configuration node. If both settings are configured, the Computer

Configuration setting overrides.

 

But keep in mind that configuring a Starting application is *not*

to be regarded as a security measure, it's more a convenience to

the user. It is fairly easy from within most applications running

in a TS session to break out of it and get access to a full desktop

session anyway.

So you'll have to lockdown your TS with NTFS permissions on the

file system and a GPO to secure it properly.

 

_________________________________________________________

Vera Noest

MCSE, CCEA, Microsoft MVP - Terminal Server

TS troubleshooting: http://ts.veranoest.net

___ please respond in newsgroup, NOT by private email ___

 

=?Utf-8?B?QmFydCBWYW4gVnVndA==?=

<BartVanVugt@discussions.microsoft.com> wrote on 10 dec 2007 in

microsoft.public.windows.terminal_services:

> You can specifiy the program that has to start in the RDP client

> in the programs tab.

>

> "Luiz" wrote:

>

>> Hi,

>>

>> I would like to know how can I configure a GPO for an

>> Application starting when the user log on the TS.

>> I can do that in RDP software, is that correct?

>> But how can I prohibit the user enter in to Desktop?

>>

>> Thanks.

>>

>> Luiz

[Guest Luiz]

RE: Starting a Program in TS

 

Thank you, Bart.

 

Regards.

 

Luiz

 

"Bart Van Vugt" wrote:

> You can specifiy the program that has to start in the RDP client in the

> programs tab.

>

> "Luiz" wrote:

>

> > Hi,

> >

> > I would like to know how can I configure a GPO for an Application starting

> > when the user log on the TS.

> > I can do that in RDP software, is that correct?

> > But how can I prohibit the user enter in to Desktop?

> >

> > Thanks.

> >

> > Luiz

[Guest Luiz]

RE: Starting a Program in TS

 

Thank you, Vera.

 

Regards,

 

Luiz.

 

"Vera Noest [MVP]" wrote:

> Or in tscc.msc, but the OP specifically asked for the GPO setting.

> You'll find the setting here:

>

> Computer Configuration - Administrative templates - Windows

> Components - Terminal Services

> "Start a program on connection"

>

> Note that the same setting is also present under the User

> Configuration node. If both settings are configured, the Computer

> Configuration setting overrides.

>

> But keep in mind that configuring a Starting application is *not*

> to be regarded as a security measure, it's more a convenience to

> the user. It is fairly easy from within most applications running

> in a TS session to break out of it and get access to a full desktop

> session anyway.

> So you'll have to lockdown your TS with NTFS permissions on the

> file system and a GPO to secure it properly.

>

> _________________________________________________________

> Vera Noest

> MCSE, CCEA, Microsoft MVP - Terminal Server

> TS troubleshooting: http://ts.veranoest.net

> ___ please respond in newsgroup, NOT by private email ___

>

> =?Utf-8?B?QmFydCBWYW4gVnVndA==?=

> <BartVanVugt@discussions.microsoft.com> wrote on 10 dec 2007 in

> microsoft.public.windows.terminal_services:

>

> > You can specifiy the program that has to start in the RDP client

> > in the programs tab.

> >

> > "Luiz" wrote:

> >

> >> Hi,

> >>

> >> I would like to know how can I configure a GPO for an

> >> Application starting when the user log on the TS.

> >> I can do that in RDP software, is that correct?

> >> But how can I prohibit the user enter in to Desktop?

> >>

> >> Thanks.

> >>

> >> Luiz

>