Solved

Locking down 3rd party applications in terminal server in Windows 2003 Server

Posted on 2006-07-22
6
238 Views
Last Modified: 2010-04-18
I have a Windwos 2003 Terminal Server which is completely locked down except for Sage Line 50 which loads at start up when a user logs in. The problem is that within Sage you can browse to the local drives of the server. In my GPO I have enabled the option that all my drives are not accessible. Within Windows you cannot see or access anything but within Sage it is possible to see the Local Hard Drives. I need to be able to lock down the Terminal Server so that when Sage is being used you can only browse a the specified Sage data folder

Please offer some assistance

Thank you
Jarrad
0
Comment
Question by:teknite
  • 2
6 Comments
 
LVL 48

Accepted Solution

by:
Jay_Jay70 earned 250 total points
Comment Utility
i might be wrong here but i think you would have to talk more to the Sage application people due to the fact that GPO and lockdown is already performing its tasks....
0
 

Author Comment

by:teknite
Comment Utility
I have spoken to Sage they say it is a Windows problem.
Any other thoughts?

Has anyone used an .adm file to lock down terminal services?
0
 
LVL 48

Expert Comment

by:Jay_Jay70
Comment Utility
http://www.microsoft.com/windowsserver2003/techinfo/overview/lockdown.mspx

i still find it hard to beleive they blamed windows.....group policy doesnt seem to cater against this sw so far....what policies have you set?
0
 
LVL 9

Assisted Solution

by:SamuraiCrow
SamuraiCrow earned 250 total points
Comment Utility
I have used a custom ADM file to modify the drives that can be hidden on a terminal server (Needed to hide some network drives not just the local ones).  However this only keeps the drives from appearing in Windows Explorer it won't prevent access to them (You can get to them by opening explorer and typing the drive designation).  The sage application is effectively bypassing the Windows Explorer blockade and enumerating the drives on its own.  The statement that it is a Windows problem doesn't hold water as an application needs to be developed for the OS not the OS for the application.  Intuit gave me the same speil on printing issues with quickbooks on a terminal server.  Sorry I couldn't be more helpful but I don't want you to waste too many cycles on this one.

Good Luck
Crow
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

Preface Having the need * to contact many different companies with different infrastructures * do remote maintenance in their network required us to implement a more flexible routing solution. As RAS, PPTP, L2TP and VPN Client connections are no…
by Batuhan Cetin Within the dynamic life of an IT administrator, we hold many information in our minds like user names, passwords, IDs, phone numbers, incomes, service tags, bills and the order from our wives to buy milk when coming back to home.…
Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the file…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now