Securing TS - Wndows 2000

[Andrew Story]

Hello NG,

Can you let me know if it is possible to restrict application access via TS
please? We have some external users that will be using the TS Web client.
Idealy we want them to only have access to 3-4 apps/shortcuts on the
desktop, and no access to anything else, but need them to be able to save to
the desktop.

Any help much appreciated.

 

[Jeff Pitsch]

Win2k is extremely limited on what you can do. Win2k3 has much better
tools. I would recommend a 3rd party solution to control application
access. othewise your pretty much limited to NTFS permissions.

Jeff Pitsch
Microsoft MVP - Terminal Server
Citrix Technology Professional
Provision Networks VIP

Forums not enough?
Get support from the experts at your business
http://jeffpitschconsulting.com

Andrew Story wrote:
> Hello NG,
>
> Can you let me know if it is possible to restrict application access via TS
> please? We have some external users that will be using the TS Web client.
> Idealy we want them to only have access to 3-4 apps/shortcuts on the
> desktop, and no access to anything else, but need them to be able to save to
> the desktop.
>
> Any help much appreciated.
>
>

 

[Cláudio Rodrigues [MVP]]

Jeff Pitsch wrote:
> Win2k is extremely limited on what you can do. Win2k3 has much better
> tools. I would recommend a 3rd party solution to control application
> access. othewise your pretty much limited to NTFS permissions.
>
> Jeff Pitsch
> Microsoft MVP - Terminal Server
> Citrix Technology Professional
> Provision Networks VIP
>
> Forums not enough?
> Get support from the experts at your business
> http://jeffpitschconsulting.com
>
> Andrew Story wrote:
>> Hello NG,
>>
>> Can you let me know if it is possible to restrict application access
>> via TS please? We have some external users that will be using the TS
>> Web client. Idealy we want them to only have access to 3-4
>> apps/shortcuts on the desktop, and no access to anything else, but
>> need them to be able to save to the desktop.
>>
>> Any help much appreciated.
>>

Well group policies still apply and work in Windows 2000.
So for sure he can use Folder Redirection to redirect the start menu
and/or Desktop and lock it down extremely well. Add NTFS permissions on
top and you can indeed have a functional desktop, locked down, with only
the icons he needs.

--
Cláudio Rodrigues
CEO, TSFactory Inc.

Microsoft MVP
Windows Server - Terminal Services
http://www.tsfactory.com

 

[ThomasT.]

Hi,

This can help, but not sure about the saving to the desktop:
http://www.mqtechnologies.com/Products/RAC20/

Thomas

"Andrew Story" <AndrewDOTstoryATjameswalkerBOTbiz> wrote in message
news:%23oGZNN7wHHA.4588@TK2MSFTNGP03.phx.gbl...
> Hello NG,
>
> Can you let me know if it is possible to restrict application access via
> TS please? We have some external users that will be using the TS Web
> client. Idealy we want them to only have access to 3-4 apps/shortcuts on
> the desktop, and no access to anything else, but need them to be able to
> save to the desktop.
>
> Any help much appreciated.
>

 

[Andrew Story]

thanks for the ideas.

I ended up using an application called appsec.exe from the win2k resource
kit. It allows you to block application access using windows2k terminal
services, works a treat.




""Cláudio Rodrigues [MVP]"" <CR@NOSPAM-TSFactory.ca> wrote in message
news:u117dB%23wHHA.4172@TK2MSFTNGP04.phx.gbl...
> Jeff Pitsch wrote:
>> Win2k is extremely limited on what you can do. Win2k3 has much better
>> tools. I would recommend a 3rd party solution to control application
>> access. othewise your pretty much limited to NTFS permissions.
>>
>> Jeff Pitsch
>> Microsoft MVP - Terminal Server
>> Citrix Technology Professional
>> Provision Networks VIP
>>
>> Forums not enough?
>> Get support from the experts at your business
>> http://jeffpitschconsulting.com
>>
>> Andrew Story wrote:
>>> Hello NG,
>>>
>>> Can you let me know if it is possible to restrict application access via
>>> TS please? We have some external users that will be using the TS Web
>>> client. Idealy we want them to only have access to 3-4 apps/shortcuts on
>>> the desktop, and no access to anything else, but need them to be able to
>>> save to the desktop.
>>>
>>> Any help much appreciated.
>>>
>
> Well group policies still apply and work in Windows 2000.
> So for sure he can use Folder Redirection to redirect the start menu
> and/or Desktop and lock it down extremely well. Add NTFS permissions on
> top and you can indeed have a functional desktop, locked down, with only
> the icons he needs.
>
> --
> Cláudio Rodrigues
> CEO, TSFactory Inc.
>
> Microsoft MVP
> Windows Server - Terminal Services
> http://www.tsfactory.com

 

[Jeff Pitsch]

yea, I left that out due to the extemely limited use it has. You'll
discover the limitations soon enough I'm sure.



Andrew Story wrote:
> thanks for the ideas.
>
> I ended up using an application called appsec.exe from the win2k resource
> kit. It allows you to block application access using windows2k terminal
> services, works a treat.
>
>
>
>
> ""Cláudio Rodrigues [MVP]"" <CR@NOSPAM-TSFactory.ca> wrote in message
> news:u117dB%23wHHA.4172@TK2MSFTNGP04.phx.gbl...
>> Jeff Pitsch wrote:
>>> Win2k is extremely limited on what you can do. Win2k3 has much better
>>> tools. I would recommend a 3rd party solution to control application
>>> access. othewise your pretty much limited to NTFS permissions.
>>>
>>> Jeff Pitsch
>>> Microsoft MVP - Terminal Server
>>> Citrix Technology Professional
>>> Provision Networks VIP
>>>
>>> Forums not enough?
>>> Get support from the experts at your business
>>> http://jeffpitschconsulting.com
>>>
>>> Andrew Story wrote:
>>>> Hello NG,
>>>>
>>>> Can you let me know if it is possible to restrict application access via
>>>> TS please? We have some external users that will be using the TS Web
>>>> client. Idealy we want them to only have access to 3-4 apps/shortcuts on
>>>> the desktop, and no access to anything else, but need them to be able to
>>>> save to the desktop.
>>>>
>>>> Any help much appreciated.
>>>>
>> Well group policies still apply and work in Windows 2000.
>> So for sure he can use Folder Redirection to redirect the start menu
>> and/or Desktop and lock it down extremely well. Add NTFS permissions on
>> top and you can indeed have a functional desktop, locked down, with only
>> the icons he needs.
>>
>> --
>> Cláudio Rodrigues
>> CEO, TSFactory Inc.
>>
>> Microsoft MVP
>> Windows Server - Terminal Services
>> http://www.tsfactory.com
>
>