Remote Desktop from TS Application Mode

[Guest MS Poster]

Hello:

 

We are running TS in Application Mode and have pretty tight control over

what apps get run on this server. We have a user requesting to use Remote

Desktop application to access another server from her TS session. Is there

any problem (actual or potential) with allowing this?

 

Thanks.

[Guest Lanwench [MVP - Exchange]]

Re: Remote Desktop from TS Application Mode

 

MS Poster <spamaway@nospam.com> wrote:

> Hello:

>

> We are running TS in Application Mode and have pretty tight control

> over what apps get run on this server. We have a user requesting to

> use Remote Desktop application to access another server from her TS

> session. Is there any problem (actual or potential) with allowing

> this?

> Thanks.

 

Well, I suppose she could set up the client to allow disk/drive redirection,

which might not be what you want.

 

I'd probably just tell her to open another parallel TS window on her own

computer - it's be a lot easier overall.

[Guest MS Poster]

Re: Remote Desktop from TS Application Mode

 

Hello Lanwench [MVP - Exchange],

> MS Poster <spamaway@nospam.com> wrote:

>

>> Hello:

>>

>> We are running TS in Application Mode and have pretty tight control

>> over what apps get run on this server. We have a user requesting to

>> use Remote Desktop application to access another server from her TS

>> session. Is there any problem (actual or potential) with allowing

>> this?

>> Thanks.

> Well, I suppose she could set up the client to allow disk/drive

> redirection, which might not be what you want.

>

> I'd probably just tell her to open another parallel TS window on her

> own computer - it's be a lot easier overall.

>

 

Thanks. We have opened a hole through the firewall just to the one TS box.

For VPN access, users must have a company laptop -- which she does not have.

 

Could we prevent the redirection via GPO or TS policy settings?

[Guest Priya Raghavan [MSFT]]

Re: Remote Desktop from TS Application Mode

 

To clarify, computer A has a TS connection to server B. From the TS session,

you want to access server C, but not allow drives etc. to be redirected onto

server C?

 

Computer A --> Server B --> Server C

 

In that case,

 

1.) You can use TS config settings or GP settings on Server C

tscc.msc -> Client Settings

2.) Disable drive, printer, clipboard redirection on the Remote Desktop

Connections option on Server B

RDC --> Options --> Local Resources

--

Thanks,

Priya.

 

--

This posting is provided "AS IS" with no warranties, and confers no rights.

 

"MS Poster" <spamaway@nospam.com> wrote in message

news:b3173d71a5df8ca227a2ba34b94@msnews.microsoft.com...

> Hello Lanwench [MVP - Exchange],

>

>> MS Poster <spamaway@nospam.com> wrote:

>>

>>> Hello:

>>>

>>> We are running TS in Application Mode and have pretty tight control

>>> over what apps get run on this server. We have a user requesting to

>>> use Remote Desktop application to access another server from her TS

>>> session. Is there any problem (actual or potential) with allowing

>>> this?

>>> Thanks.

>> Well, I suppose she could set up the client to allow disk/drive

>> redirection, which might not be what you want.

>>

>> I'd probably just tell her to open another parallel TS window on her

>> own computer - it's be a lot easier overall.

>>

>

> Thanks. We have opened a hole through the firewall just to the one TS box.

> For VPN access, users must have a company laptop -- which she does not

> have.

> Could we prevent the redirection via GPO or TS policy settings?

>

>

[Guest Lanwench [MVP - Exchange]]

Re: Remote Desktop from TS Application Mode

 

MS Poster <spamaway@nospam.com> wrote:

> Hello Lanwench [MVP - Exchange],

>

>> MS Poster <spamaway@nospam.com> wrote:

>>

>>> Hello:

>>>

>>> We are running TS in Application Mode and have pretty tight control

>>> over what apps get run on this server. We have a user requesting to

>>> use Remote Desktop application to access another server from her TS

>>> session. Is there any problem (actual or potential) with allowing

>>> this?

>>> Thanks.

>> Well, I suppose she could set up the client to allow disk/drive

>> redirection, which might not be what you want.

>>

>> I'd probably just tell her to open another parallel TS window on her

>> own computer - it's be a lot easier overall.

>>

>

> Thanks. We have opened a hole through the firewall just to the one TS

> box.

> For VPN access, users must have a company laptop -- which she

> does not have.

> Could we prevent the redirection via GPO or TS policy settings?

 

If the other server to which she wants to connect, is one of *yours* / under

your control, yes. If it's not one of your own servers you can't do anything

about it that I know of.

[Guest Vera Noest [MVP]]

Re: Remote Desktop from TS Application Mode

 

"Lanwench [MVP - Exchange]"

<lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote

on 12 jan 2008 in microsoft.public.windows.terminal_services:

> MS Poster <spamaway@nospam.com> wrote:

>> Hello Lanwench [MVP - Exchange],

>>

>>> MS Poster <spamaway@nospam.com> wrote:

>>>

>>>> Hello:

>>>>

>>>> We are running TS in Application Mode and have pretty tight

>>>> control over what apps get run on this server. We have a user

>>>> requesting to use Remote Desktop application to access

>>>> another server from her TS session. Is there any problem

>>>> (actual or potential) with allowing this?

>>>> Thanks.

>>> Well, I suppose she could set up the client to allow

>>> disk/drive redirection, which might not be what you want.

>>>

>>> I'd probably just tell her to open another parallel TS window

>>> on her own computer - it's be a lot easier overall.

>>>

>>

>> Thanks. We have opened a hole through the firewall just to the

>> one TS box.

>

>> For VPN access, users must have a company laptop -- which she

>> does not have.

>> Could we prevent the redirection via GPO or TS policy settings?

>

> If the other server to which she wants to connect, is one of

> *yours* / under your control, yes. If it's not one of your own

> servers you can't do anything about it that I know of.

 

Check here for a solution when the TS is *not* under you control,

as seems to be the case here.

 

How can I prevent my users from redirecting their local resources,

like drives and clip board?

http://ts.veranoest.net/ts_faq_client_resources.htm#preventDriveMap

ping

 

_________________________________________________________

Vera Noest

MCSE, CCEA, Microsoft MVP - Terminal Server

TS troubleshooting: http://ts.veranoest.net

___ please respond in newsgroup, NOT by private email ___

[Guest MS Poster]

Re: Remote Desktop from TS Application Mode

 

Thanks for the info. This other server is, indeed, internal. I would only

allow deskop control -- none of the other redirected services. So it sounds

like just the inherent action of "cascading" the remote control is not a

problem. (I know we used to do it all the time as admins, but I thought there

might be something different with running it as an application server.)

 

Thanks again.

 

 

Hello Vera Noest [MVP],

> http://ts.veranoest.net/ts_faq_client_resources.htm#preventDriveMap

> ping

>

[Guest Lanwench [MVP - Exchange]]

Re: Remote Desktop from TS Application Mode

 

Vera Noest [MVP] <vera.noest@remove-this.hem.utfors.se> wrote:

> "Lanwench [MVP - Exchange]"

> <lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote

> on 12 jan 2008 in microsoft.public.windows.terminal_services:

>

>> MS Poster <spamaway@nospam.com> wrote:

>>> Hello Lanwench [MVP - Exchange],

>>>

>>>> MS Poster <spamaway@nospam.com> wrote:

>>>>

>>>>> Hello:

>>>>>

>>>>> We are running TS in Application Mode and have pretty tight

>>>>> control over what apps get run on this server. We have a user

>>>>> requesting to use Remote Desktop application to access

>>>>> another server from her TS session. Is there any problem

>>>>> (actual or potential) with allowing this?

>>>>> Thanks.

>>>> Well, I suppose she could set up the client to allow

>>>> disk/drive redirection, which might not be what you want.

>>>>

>>>> I'd probably just tell her to open another parallel TS window

>>>> on her own computer - it's be a lot easier overall.

>>>>

>>>

>>> Thanks. We have opened a hole through the firewall just to the

>>> one TS box.

>>

>>> For VPN access, users must have a company laptop -- which she

>>> does not have.

>>> Could we prevent the redirection via GPO or TS policy settings?

>>

>> If the other server to which she wants to connect, is one of

>> *yours* / under your control, yes. If it's not one of your own

>> servers you can't do anything about it that I know of.

>

> Check here for a solution when the TS is *not* under you control,

> as seems to be the case here.

>

> How can I prevent my users from redirecting their local resources,

> like drives and clip board?

> http://ts.veranoest.net/ts_faq_client_resources.htm#preventDriveMap

> ping

>

 

Ah - cool beans. Thanks, Vera.

> _________________________________________________________

> Vera Noest

> MCSE, CCEA, Microsoft MVP - Terminal Server

> TS troubleshooting: http://ts.veranoest.net

> ___ please respond in newsgroup, NOT by private email ___