Improve company productivity with a Business Account.Sign Up

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 791
  • Last Modified:

Using Software Restriction for Quickbooks in Terminal Services

I am building a terminal server for a client.  It will be used for general use remote access for a small number of users.  Some users will need access to Quickbooks (using Enterprise Solutions edition) but some will not.  Can I use software restriction (or something else) to have Quickbooks active, and show up for users in the Accounting group that exists in AD, and not show up for anyone else?

I haven't used software restriction much in the past, so I'm not totally clear on how it works, and if this would be the right use, how to apply it, etc.
0
dempsedm
Asked:
dempsedm
  • 2
  • 2
2 Solutions
 
JimboEfxCommented:
Here is the how-to on software restriction policies and their various options:

http://support.microsoft.com/kb/324036

I would couple this with a GPO lockdown of your TS desktop - with a standard desktop, start menu and programs folder for most users, and special desktops e.g quickbooks users.

These would have shortcuts to only the programs you want.
Lockdown access to explorer, local drivers etc etc

e.g.
http://technet2.microsoft.com/windowsserver/en/library/7b33dcd6-0ad2-44e8-82f8-962425b6cf8e1033.mspx?mfr=true

Powerful when combined with software restriciton polices.
0
 
Cláudio RodriguesFounder and CEOCommented:
Software Restriction Policies I think is not the best way to do in this case as it really does not deal with start menu/shortcuts management.
First, using Start Menu redirection you can have different start menus based on group membership, meaning certain groups will see different icons/program groups on their start menu.
Then, use NTFS permissions directly in the QuickBooks folder to DENY access to users that are not part of the 'QuickBooks Users' group. So even if users find workarounds to get to the folder they will NOT be able to launch the application.
That is probably the best way to go.

Cheers.

Claudio Rodrigues

Microsoft MVP
Windows Server - Terminal Services
0
 
dempsedmAuthor Commented:
Claudio, do you have any info on how to adjust start menu based on group membership?
0
 
Cláudio RodriguesFounder and CEOCommented:
0
 
dempsedmAuthor Commented:
Thanks, sorry I didn't get back sooner.  I will try these suggestions in the next couple of days, get back to you guys, and try to close out this question.  Thanks for your help!
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now