Prevent users from browsing and accessing network resources from the TS server

Posted on 2009-12-19
Last Modified: 2013-11-21
I want to know how to prevent users from browsing and accessing network resources from the TS server. If there is a way to disable the prompt to turn on network discovery and file sharing for TS users, and prevent them from accessing network resources by using UNC paths in the File open dialog box for a RemoteApp, etc.

Please do not give me this solution as this does not work  :  
Question by:joshiap
    LVL 76

    Expert Comment

    Isolate the TS server from the LAN network.
    Limit what the TS users can do on the network i.e. set them in a specific group and then deny said group any and all rights.
    LVL 1

    Author Comment

    I need a better explanation , in terms of solution. Also, am looking for solution from and on a TS side. That is, can I make some/any change on the TS sever or in GP or any application + registry or some where that will limit the user from accessing "Network Places" on a TS server.
    Please specify very clearly with the policy or registry, steps
    LVL 76

    Accepted Solution

    To prevent someone from going to a different room in the house, you either lock the doors on the various rooms or not allow the individual access to the house at all.

    You can not restrict by policy or registry access to one network share and not another.
    What you can do is on the shares define who can access and who will be denied access.
    Look at GPO user configuration\administrative templates\network for options

    If the TS is on the domain and if the user logging in is a domain user, any access the user has when sitting in front of a workstation on the LAN will be the access the user has on the TS.

    LVL 1

    Author Closing Comment


    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    How to run any project with ease

    Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
    - Combine task lists, docs, spreadsheets, and chat in one
    - View and edit from mobile/offline
    - Cut down on emails

    This is my 3rd article on SCCM in recent weeks, the 1st ( dealing with installat…
    Remote Apps is a feature in server 2008 which allows users to run applications off Remote Desktop Servers without having to log into them to run the applications.  The user can either have a desktop shortcut installed or go through the web portal to…
    Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…
    Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…

    760 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    8 Experts available now in Live!

    Get 1:1 Help Now