Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

Prevent users from browsing and accessing network resources from the TS server

Posted on 2009-12-19
4
Medium Priority
?
1,001 Views
Last Modified: 2013-11-21
I want to know how to prevent users from browsing and accessing network resources from the TS server. If there is a way to disable the prompt to turn on network discovery and file sharing for TS users, and prevent them from accessing network resources by using UNC paths in the File open dialog box for a RemoteApp, etc.

Please do not give me this solution as this does not work  : http://social.technet.microsoft.com/Forums/en/winserverGP/thread/1a914e11-ffe3-4ed2-ab7f-5d43fea9a715 
and http://social.technet.microsoft.com/Forums/en/winserverGP/thread/84702874-9859-4f6f-b463-3abccc5a3cde
0
Comment
Question by:joshiap
  • 2
  • 2
4 Comments
 
LVL 81

Expert Comment

by:arnold
ID: 26089380
Isolate the TS server from the LAN network.
Limit what the TS users can do on the network i.e. set them in a specific group and then deny said group any and all rights.
0
 
LVL 1

Author Comment

by:joshiap
ID: 26089514
I need a better explanation , in terms of solution. Also, am looking for solution from and on a TS side. That is, can I make some/any change on the TS sever or in GP or any application + registry or some where that will limit the user from accessing "Network Places" on a TS server.
 
Please specify very clearly with the policy or registry, steps
0
 
LVL 81

Accepted Solution

by:
arnold earned 1500 total points
ID: 26091556
To prevent someone from going to a different room in the house, you either lock the doors on the various rooms or not allow the individual access to the house at all.

You can not restrict by policy or registry access to one network share and not another.
What you can do is on the shares define who can access and who will be denied access.
Look at GPO user configuration\administrative templates\network for options

If the TS is on the domain and if the user logging in is a domain user, any access the user has when sitting in front of a workstation on the LAN will be the access the user has on the TS.

0
 
LVL 1

Author Closing Comment

by:joshiap
ID: 31668189
Good
0

Featured Post

[Webinar On Demand] Database Backup and Recovery

Does your company store data on premises, off site, in the cloud, or a combination of these? If you answered “yes”, you need a data backup recovery plan that fits each and every platform. Watch now as as Percona teaches us how to build agile data backup recovery plan.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This is a little timesaver I have been using for setting up Microsoft Small Business Server (SBS) in the simplest possible way. It may not be appropriate for every customer. However, when you get a situation where the person who owns the server is i…
Background Information Recently I have fixed file server permission issues for one of my client. The client has 1800 users and one Windows Server 2008 R2 domain joined file server with 12 TB of data, 250+ shared folders and the folder structure i…
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …
Suggested Courses

571 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question