How to prevent users from viewing a full desktop TS session?

[FB]

My problem:

How can i create an remote App .MSI to permit the user to see the lcoal
drive C: inside the TS connection and how to block the user from connection
to my TS2008 and seeing a full desktop?

I´m testing a TS2008 with 2 Apps.

I´ve configured 2 TS RemoteApp Packages (.MSI files, with an .RDP inside)
One of the Apps needs Local Admin privileges and the othe don´t. I´ve
created Local Users (i don´t have AD)

Everyting is working fine, but...

The User ask for saving certain HTML/PDF reports on his/her LOCAL (XP SP3)
machines. The TS clients are on a city 200 KM away, connected by a 4 Mb/s
MPLS Wan Link.

What i do? Tested to allow to redirect local drive in the TS session. I
generated a new .MSI but didn´t worked. The i´ve tried to enale a custom RDP
settings, but an error message appears warning about override settings and
didn´t work too.

When i created a .RDP file (insted a MSI File) it worked. But using a .MSI
will be a "elegant" solution to the problem. Usnig a installer-like .MSI is
great, but only a modified .RDP file is working.

So i noticed: if the users Opens the MSTSC.EXE and deletes the name od the
..EXE app of the initial path, the user will conenct to a FULL Desktop.


My problem:

How can i create an remote App .MSI to permit the user to see the lcoal
drive C: inside the TS connection and how to block the user from connection
to my TS2008 and seeing a full desktop?

 

[Lanwench [MVP - Exchange]]

FB wrote:
> My problem:
>
> How can i create an remote App .MSI to permit the user to see the
> lcoal drive C: inside the TS connection and how to block the user
> from connection to my TS2008 and seeing a full desktop?
>
> I´m testing a TS2008 with 2 Apps.
>
> I´ve configured 2 TS RemoteApp Packages (.MSI files, with an .RDP
> inside) One of the Apps needs Local Admin privileges and the othe
> don´t. I´ve created Local Users (i don´t have AD)
>
> Everyting is working fine, but...
>
> The User ask for saving certain HTML/PDF reports on his/her LOCAL (XP
> SP3) machines. The TS clients are on a city 200 KM away, connected by
> a 4 Mb/s MPLS Wan Link.
>
> What i do? Tested to allow to redirect local drive in the TS session.
> I generated a new .MSI but didn´t worked. The i´ve tried to enale a
> custom RDP settings, but an error message appears warning about
> override settings and didn´t work too.
>
> When i created a .RDP file (insted a MSI File) it worked. But using a
> .MSI will be a "elegant" solution to the problem. Usnig a
> installer-like .MSI is great, but only a modified .RDP file is
> working.
>
> So i noticed: if the users Opens the MSTSC.EXE and deletes the name
> od the .EXE app of the initial path, the user will conenct to a FULL
> Desktop.
>
>
> My problem:
>
> How can i create an remote App .MSI to permit the user to see the
> lcoal drive C: inside the TS connection and how to block the user
> from connection to my TS2008 and seeing a full desktop?

Hi - this is a general-purpose server group. Try posting in
microsoft.public.windows.terminal_services for the most expert help. I
suspect they will discuss software restriction policies.

 

[Sleb]

Thanks all for your responses. Good to know that it is not recommended to put
a system partition as a dynamic disk.

Regards

"FB" wrote:

> My problem:
>
> How can i create an remote App .MSI to permit the user to see the lcoal
> drive C: inside the TS connection and how to block the user from connection
> to my TS2008 and seeing a full desktop?
>
> I´m testing a TS2008 with 2 Apps.
>
> I´ve configured 2 TS RemoteApp Packages (.MSI files, with an .RDP inside)
> One of the Apps needs Local Admin privileges and the othe don´t. I´ve
> created Local Users (i don´t have AD)
>
> Everyting is working fine, but...
>
> The User ask for saving certain HTML/PDF reports on his/her LOCAL (XP SP3)
> machines. The TS clients are on a city 200 KM away, connected by a 4 Mb/s
> MPLS Wan Link.
>
> What i do? Tested to allow to redirect local drive in the TS session. I
> generated a new .MSI but didn´t worked. The i´ve tried to enale a custom RDP
> settings, but an error message appears warning about override settings and
> didn´t work too.
>
> When i created a .RDP file (insted a MSI File) it worked. But using a .MSI
> will be a "elegant" solution to the problem. Usnig a installer-like .MSI is
> great, but only a modified .RDP file is working.
>
> So i noticed: if the users Opens the MSTSC.EXE and deletes the name od the
> .EXE app of the initial path, the user will conenct to a FULL Desktop.
>
>
> My problem:
>
> How can i create an remote App .MSI to permit the user to see the lcoal
> drive C: inside the TS connection and how to block the user from connection
> to my TS2008 and seeing a full desktop?
>