I have a SBS 2003 domain and a windows 2000 server running terminal services in application mode as a member server to this SBS domain.
My question is this. I have about 30 users that are setup with a default domain policy and and some basic restrictions through GPO. These users can log into the 2000 terminal server, but I want them to have a restricted set of abilities (e.g. prohibit the shutdown option on the taskbar, etc.)
How can I do this? I've created a policy object with the set of restrictions that I want, but I'm afraid that if I apply this to my users this will be applied when they log into their desktops as well. How do I only apply this to their terminal server sessions?
If you could just point me in the right direction!