Solved

Using Software Restriction for Quickbooks in Terminal Services

Posted on 2007-11-28
5
776 Views
Last Modified: 2013-11-21
I am building a terminal server for a client.  It will be used for general use remote access for a small number of users.  Some users will need access to Quickbooks (using Enterprise Solutions edition) but some will not.  Can I use software restriction (or something else) to have Quickbooks active, and show up for users in the Accounting group that exists in AD, and not show up for anyone else?

I haven't used software restriction much in the past, so I'm not totally clear on how it works, and if this would be the right use, how to apply it, etc.
0
Comment
Question by:dempsedm
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
5 Comments
 
LVL 15

Accepted Solution

by:
JimboEfx earned 250 total points
ID: 20367735
Here is the how-to on software restriction policies and their various options:

http://support.microsoft.com/kb/324036

I would couple this with a GPO lockdown of your TS desktop - with a standard desktop, start menu and programs folder for most users, and special desktops e.g quickbooks users.

These would have shortcuts to only the programs you want.
Lockdown access to explorer, local drivers etc etc

e.g.
http://technet2.microsoft.com/windowsserver/en/library/7b33dcd6-0ad2-44e8-82f8-962425b6cf8e1033.mspx?mfr=true

Powerful when combined with software restriciton polices.
0
 
LVL 31

Expert Comment

by:Cláudio Rodrigues
ID: 20370778
Software Restriction Policies I think is not the best way to do in this case as it really does not deal with start menu/shortcuts management.
First, using Start Menu redirection you can have different start menus based on group membership, meaning certain groups will see different icons/program groups on their start menu.
Then, use NTFS permissions directly in the QuickBooks folder to DENY access to users that are not part of the 'QuickBooks Users' group. So even if users find workarounds to get to the folder they will NOT be able to launch the application.
That is probably the best way to go.

Cheers.

Claudio Rodrigues

Microsoft MVP
Windows Server - Terminal Services
0
 
LVL 4

Author Comment

by:dempsedm
ID: 20371527
Claudio, do you have any info on how to adjust start menu based on group membership?
0
 
LVL 31

Assisted Solution

by:Cláudio Rodrigues
Cláudio Rodrigues earned 250 total points
ID: 20373976
0
 
LVL 4

Author Comment

by:dempsedm
ID: 20397244
Thanks, sorry I didn't get back sooner.  I will try these suggestions in the next couple of days, get back to you guys, and try to close out this question.  Thanks for your help!
0

Featured Post

Get 15 Days FREE Full-Featured Trial

Benefit from a mission critical IT monitoring with Monitis Premium or get it FREE for your entry level monitoring needs.
-Over 200,000 users
-More than 300,000 websites monitored
-Used in 197 countries
-Recommended by 98% of users

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Background Information Recently I have fixed file server permission issues for one of my client. The client has 1800 users and one Windows Server 2008 R2 domain joined file server with 12 TB of data, 250+ shared folders and the folder structure i…
Know what services you can and cannot, should and should not combine on your server.
This video Micro Tutorial shows how to password-protect PDF files with free software. Many software products can do this, such as Adobe Acrobat (but not Adobe Reader), Nuance PaperPort, and Nuance Power PDF, but they are not free products. This vide…
Do you want to know how to make a graph with Microsoft Access? First, create a query with the data for the chart. Then make a blank form and add a chart control. This video also shows how to change what data is displayed on the graph as well as form…

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question