User Profiles in TS

[sihfmis]

I am looking for a process for setting up a user's profile within TS. I want
to control what the user sees when he/she logs in (ie-MS Office Suite and
nothing else). Is this doable?

 

[Vera Noest [MVP]]

Absolutely!
The method to use is Group Policies.
Use folder redirection to point all users to a custom desktop
folder and start menu.

User Configuration - Windows Settings - Folder Redirection
Desktop
Start Menu

Since these are User Configuration settings, you also need to use
loopback processing of the GPO, to make sure that the above
mentioned settings are applied to all users of your TS, even though
the GPO must be linked to the OU which contains the TS machine
account (and *not* the user accounts!)

Computer Configuration - Administrative Templates - System - Group
Policy
"User Group Policy loopback processing mode" - "Replace"

231287 - Loopback Processing of Group Policy
http://support.microsoft.com/?kbid=231287
_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

=?Utf-8?B?c2loZm1pcw==?= <sihfmis@discussions.microsoft.com> wrote
on 07 aug 2007 in microsoft.public.windows.terminal_services:

> I am looking for a process for setting up a user's profile
> within TS. I want to control what the user sees when he/she
> logs in (ie-MS Office Suite and nothing else). Is this doable?

 

[sihfmis]

Is there any documentation that goes into more detail? I suspect I will be
more involved with this then I am suspecting.

"Vera Noest [MVP]" wrote:

> Absolutely!
> The method to use is Group Policies.
> Use folder redirection to point all users to a custom desktop
> folder and start menu.
>
> User Configuration - Windows Settings - Folder Redirection
> Desktop
> Start Menu
>
> Since these are User Configuration settings, you also need to use
> loopback processing of the GPO, to make sure that the above
> mentioned settings are applied to all users of your TS, even though
> the GPO must be linked to the OU which contains the TS machine
> account (and *not* the user accounts!)
>
> Computer Configuration - Administrative Templates - System - Group
> Policy
> "User Group Policy loopback processing mode" - "Replace"
>
> 231287 - Loopback Processing of Group Policy
> http://support.microsoft.com/?kbid=231287
> _________________________________________________________
> Vera Noest
> MCSE, CCEA, Microsoft MVP - Terminal Server
> TS troubleshooting: http://ts.veranoest.net
> ___ please respond in newsgroup, NOT by private email ___
>
> =?Utf-8?B?c2loZm1pcw==?= <sihfmis@discussions.microsoft.com> wrote
> on 07 aug 2007 in microsoft.public.windows.terminal_services:
>
> > I am looking for a process for setting up a user's profile
> > within TS. I want to control what the user sees when he/she
> > logs in (ie-MS Office Suite and nothing else). Is this doable?
>

 

[Helge Klein]

I think this document will help you:

Locking Down Windows Server 2003 Terminal Server Sessions
http://www.microsoft.com/windowsserver2003/techinfo/overview/lockdown.mspx

Helge

==================
Please visit my blog:
http://it-from-inside.blogspot.com
==================

On 8 Aug., 17:58, sihfmis <sihf...@discussions.microsoft.com> wrote:
> Is there any documentation that goes into more detail? I suspect I will be
> more involved with this then I am suspecting.
>
> "Vera Noest [MVP]" wrote:
> > Absolutely!
> > The method to use is Group Policies.
> > Use folder redirection to point all users to a custom desktop
> > folder and start menu.
>
> > User Configuration - Windows Settings - Folder Redirection
> > Desktop
> > Start Menu
>
> > Since these are User Configuration settings, you also need to use
> > loopback processing of the GPO, to make sure that the above
> > mentioned settings are applied to all users of your TS, even though
> > the GPO must be linked to the OU which contains the TS machine
> > account (and *not* the user accounts!)
>
> > Computer Configuration - Administrative Templates - System - Group
> > Policy
> > "User Group Policy loopback processing mode" - "Replace"
>
> > 231287 - Loopback Processing of Group Policy
> >http://support.microsoft.com/?kbid=231287
> > _________________________________________________________
> > Vera Noest
> > MCSE, CCEA, Microsoft MVP - Terminal Server
> > TS troubleshooting: http://ts.veranoest.net
> > ___ please respond in newsgroup, NOT by private email ___
>
> > =?Utf-8?B?c2loZm1pcw==?= <sihf...@discussions.microsoft.com> wrote
> > on 07 aug 2007 in microsoft.public.windows.terminal_services:
>
> > > I am looking for a process for setting up a user's profile
> > > within TS. I want to control what the user sees when he/she
> > > logs in (ie-MS Office Suite and nothing else). Is this doable?