Windows Forum

Ask something
Discussion Locked

Term server user dial-in permissions.

0 helpful
5 replies

by dan

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

What is the best method of securing, or
locking down, a terminal server client dial-in session, so they have rights to most programs, however, They cannot get or harm any critical
registry or system files, and above all! they will not be able to have the choices displayed to Shut Down the server or Restart the server remotley. They are running in win2000 mode with win2k client pc's.

5 replies

by dan

With W2k term servers Its been a close balance between having enough legacy rights to run programs, and locking down
any rights that by default allows any remote client to shut down or restart the server remotley. Citrix that ive used has a GUI that allows you to only let the client log on or off not much else.

by yatesee

May i suggest looking at the Group Policies Objects. You can set which programs the users can run.
the option you want is under User Configuration\Administrative Templates\System\

The key is called "Run only allowed Windows apps"

Add your apps you want your TS users to use in here, and assign this GP to a group of the TS users.

contact me if u want more indepth help.

by yatesee

forgot to say....

In the GPO, you can change hundreds of rights for those users, inc - access to registy, mission critial files, etc.

by dan

Thanks For the answer Tommy, I did find the answer after I posted this question.
I created a new group policy objet goto properties of that objet and wala! I changed the taskbar and logoff properties among other objects. Windows Desktop settings, access to drives etc. This way with the new group policy object all I had to do was move the individual Dial-up users that needed this policy to it.

This discussion is closed to new replies.