Terminal Services Group Rights

Posted on 2005-05-06
Last Modified: 2013-11-21
In Windows Server 2003 Standard, is there a way to assign similar terminal services profile to a Group?

For instance, there are several users for whom I want TS to launch a program upon connection. I do not want to configure this individually for each user.
Question by:scptech
    LVL 15

    Accepted Solution

    Hi scptech,
    One way of achieving this would be to update your login script(s) to launch the application, if the user is a member of a specific group.

    Here's a sample bit of VBS code to get you started:
    Option Explicit
    Dim objNetwork, objUser, CurrentUser,WshShell
    Dim strGroup

    Const TS_launch_Group = "cn=TS_launch_group"

    Set objNetwork = CreateObject("WScript.Network")
    ' Forces script to skip errors (rem below line to see errors)
    'on error resume next

    Set objUser = CreateObject("ADSystemInfo")
    Set CurrentUser = GetObject("LDAP://" & objUser.UserName)
    strGroup = LCase(Join(CurrentUser.MemberOf))

    if InStr(strGroup, TS_launch_Group) then
      Set WshShell = WScript.CreateObject("WScript.Shell")
    end if

    Please note that I haven't been able to test this, but it ought to work.  Much of the code was taken from

    Does that help?
    LVL 25

    Assisted Solution

    by:Ron M
    Create a securit group in AD...e.g. Terminal Service App Group
    Set the permissions on the program folder so that only the Terminal Service App group and Administrator has access.
    Create a batch file with the follwing contents and place it in your c:\documents and settings\all users\start menu\startup can place this in your domain logon script.


    if %username% == Administrator exit
    if exist "c:\program files\program folder\program.exe" "c:\program files\program folder\program.exe"


    Since only users in this group can see the file....the script will only launch the app for them.
    LVL 25

    Expert Comment

    by:Ron M
    PS: ADMINISTRATOR has to be in CAPS.

    Featured Post

    Looking for New Ways to Advertise?

    Engage with tech pros in our community with native advertising, as a Vendor Expert, and more.

    Join & Write a Comment

    Some time ago I faced the need to use a uniform folder structure that spanned across numerous sites of an enterprise to be used as a common repository for the Software packages of the Configuration Manager 2007 infrastructure. Because the procedu…
    Data center, now-a-days, is referred as the home of all the advanced technologies. In-fact, most of the businesses are now establishing their entire organizational structure around the IT capabilities.
    Viewers will learn how to connect to a wireless network using the network security key. They will also learn how to access the IP address and DNS server for connections that must be done manually. After setting up a router, find the network security…
    After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

    728 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    15 Experts available now in Live!

    Get 1:1 Help Now