Remote Desktop - Run one application only!

Posted on 2007-10-03
Last Modified: 2013-11-21
Hi everyone,

My question is, how do I configure a Remote Desktop connection to my 2003 SBS Enterprise Server to access only ONE specific application and deny access to all other applications and to disallow use of the start button, or any means of accessing the system other than the prescribed application (which will be setup as read only).

Basically what I want is this specific user to run one application and NOTHING else and be prevented from accessing any other part of the server etc.

many thanks
Question by:bushsubaru
    LVL 8

    Expert Comment

    What about redirecting the start menu to nothing, and cleaning it out completelly.  Take all icons off the desktop, then under the mstsc application set it to start application on startup.  This will only give the user access to that one application.  You might also want to add the logoff option to the Startbar so I wouldn't remove it.
    LVL 12

    Accepted Solution

    use group policy to lock the server down and remove everything from the start menu apart from logoff and place a shortcut on the desktop to the application that needs to be used.

    you want to go through all the settings in group policy and disable browsing via network and remove all the drives from my computer just lock it down completly
    LVL 5

    Expert Comment

    There is a group policy settings to "allow only the specified applications".

    Author Comment

    Mmmmm It seems that the solution is more in keeping with Acoms Razor "The simplest solution tends to be the correct one"

    One of our junior techies here advised "it is not necessary to go to the lengths advised by the experts" - just go to the properties ogf the SBSUser and set the environment to run a specific application. This has the effect of excluding all other settings and applications and then logs out when finished - PERFECT!

    What do you guys think!
    LVL 12

    Expert Comment

    if thats what you want do it .  terminal servers can be an easy way onto the network soo i would lock it down anyway

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Highfive Gives IT Their Time Back

    Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

    Learn about cloud computing and its benefits for small business owners.
    Know what services you can and cannot, should and should not combine on your server.
    In this sixth video of the Xpdf series, we discuss and demonstrate the PDFtoPNG utility, which converts a multi-page PDF file to separate color, grayscale, or monochrome PNG files, creating one PNG file for each page in the PDF. It does this via a c…
    Access reports are powerful and flexible. Learn how to create a query and then a grouped report using the wizard. Modify the report design after the wizard is done to make it look better. There will be another video to explain how to put the final p…

    759 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    10 Experts available now in Live!

    Get 1:1 Help Now