Desktop control for users

[Guest SJMP]

I want to have a standard (very locked down desktop) for domain users on a

new windows 2003 terminal server. can someone point me in the right direction

- would I use Group policy? templates? third party software?

Any docs or kb references would be appreciated.

 

 

Thanks,

 

SJMP

[Guest Vera Noest [MVP]]

Re: Desktop control for users

 

You need to use a combination of NTFS permissions on the file

system and a restrictive Group Policy.

 

Here's some reading:

 

278295 - How to lock down a Windows Server 2003 or Windows 2000

Terminal Server session

http://support.microsoft.com/?kbid=278295

 

Windows Server 2003 Terminal Server Security White Paper

http://www.microsoft.com/downloads/details.aspx?FamilyID=402A0CD1-

9E4D-4007-8EAF-C30623E71250&displaylang=en

 

Locking Down Windows Server 2003 Terminal Server Sessions

http://www.microsoft.com/windowsserver2003/techinfo/overview/lockdo

wn.mspx

 

_________________________________________________________

Vera Noest

MCSE, CCEA, Microsoft MVP - Terminal Server

TS troubleshooting: http://ts.veranoest.net

___ please respond in newsgroup, NOT by private email ___

 

=?Utf-8?B?U0pNUA==?= <sjmp@newsgroup.nospam> wrote on 15 jan 2008

in microsoft.public.windows.terminal_services:

> I want to have a standard (very locked down desktop) for domain

> users on a new windows 2003 terminal server. can someone point

> me in the right direction - would I use Group policy? templates?

> third party software? Any docs or kb references would be

> appreciated.

>

>

> Thanks,

>

> SJMP

[Guest George Yin]

Re: Desktop control for users

 

Hello SJMP,

 

Thank you for your post, also thank to Vera Noest for sharing these useful

information.

 

Vera Noest is right, KB278295 will help you make a totally locked down

environment for the remote users.

 

A little additional information for your reference. If these domain users

are only remote users, you can also use the mandatory Roaming User Profile

to restrict the users to a standard desktop. This will also need some group

policies if necessary. Please note, nobody's profile will be saved back to

the server by doing this.

 

For details about how to make the mandatory Roaming User Profile, please

refer to:

 

Create a mandatory user profile

http://technet2.microsoft.com/windowsserver/en/library/3bd7900c-6145-461d-89

f2-c12a8c6dd7301033.mspx?mfr=true

 

If anything is unclear, please feel free to let me know. I look forward to

your reply.

 

Have a nice day!

 

Sincerely,

George Yin

Microsoft Online Support

Microsoft Global Technical Support Center

 

Get Secure! - http://www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so

that others may learn and benefit from your issue.

=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

[Guest ThomasT.]

Re: Desktop control for users

 

Hi,

You can also use Remote Application Center (RAC), it's free.

Download it here :

 

http://www.mqtechnologies.com

 

Regards

 

Thomas T.

 

"SJMP" <sjmp@newsgroup.nospam> wrote in message

news:6C38611A-171D-494D-A9C1-E0A69BB334E7@microsoft.com...

>I want to have a standard (very locked down desktop) for domain users on a

> new windows 2003 terminal server. can someone point me in the right

> direction

> - would I use Group policy? templates? third party software?

> Any docs or kb references would be appreciated.

>

>

> Thanks,

>

> SJMP

[Guest George Yin]

RE: Desktop control for users

 

Hello SJMP,

 

How's everything going?

 

I'm wondering if the suggestion has helped or if you have any further

questions. Please feel free to respond to the newsgroups if I can assist

further.

 

Sincerely,

George Yin

Microsoft Online Support

Microsoft Global Technical Support Center

 

Get Secure! - http://www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so

that others may learn and benefit from your issue.

=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.