asked on

Using Software Restriction for Quickbooks in Terminal Services

I am building a terminal server for a client. It will be used for general use remote access for a small number of users. Some users will need access to Quickbooks (using Enterprise Solutions edition) but some will not. Can I use software restriction (or something else) to have Quickbooks active, and show up for users in the Accounting group that exists in AD, and not show up for anyone else?

I haven't used software restriction much in the past, so I'm not totally clear on how it works, and if this would be the right use, how to apply it, etc.

ASKER CERTIFIED SOLUTION

James Montgomery

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

Cláudio Rodrigues

Software Restriction Policies I think is not the best way to do in this case as it really does not deal with start menu/shortcuts management.
First, using Start Menu redirection you can have different start menus based on group membership, meaning certain groups will see different icons/program groups on their start menu.
Then, use NTFS permissions directly in the QuickBooks folder to DENY access to users that are not part of the 'QuickBooks Users' group. So even if users find workarounds to get to the folder they will NOT be able to launch the application.
That is probably the best way to go.

Cheers.

Claudio Rodrigues

Microsoft MVP
Windows Server - Terminal Services

dempsedm

ASKER

Claudio, do you have any info on how to adjust start menu based on group membership?

SOLUTION