windows 2003 Terminal server questions

Couple of questions regarding TS:
1. does TS has to be joined to the domain? Can be be standalone server ?

2. Why I have to run change user /install in CMD before installation? or in add/remove? I tried to install an application file directly without using that method, I didn't see anything differently.

3. when user create a word document file, if they want to save to their own usb, how are they going to do it? walk to the server and plug the usb??
or if they want to attach the doc to their outlook..

4. what the best alternative of the TS? Is it the Citrix Zenapp?
okamonAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

B HCommented:
1. no, but if not joined to the domain, only local user accounts will be able to log in.  and, if they need to access resources on other servers they'll need to provide a domain username and password multiple times

2. some programs are terminal server aware and won't install properly, it'll miss key locations for files in the user profiles and registry locations.  it's always a good idea to put the TS into install mode first, as you indicated

3. before they connect, have them go into the terminal server client 'options' and 'local resources' and put a checkmark by 'disk drives'.  then, once on the server, they can access their local drives like \\tsclient\X  where is is the local drive letter.  the usb stick might be \\tsclient\e for example.  they'll also see them in the servers 'my computer', under 'other drives'

4. there are some versions of VNC that support multiple concurrent users, citrix is another option
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
okamonAuthor Commented:
thank you! For question #3, I tried your suggestion, but when I tried to copy the file to my drive c:, I got "make sure the disk is not full or write-protected....."
how am I going to attach the file to my outlook?

personally, I really feel the TS is really not practical, users always have to fireup their rdp client to use applications and when they need to attach files to outlook or put in network share folder, they cannot...
0
B HCommented:
they can't put into the network share folder if the terminal server is not a member of the domain....

for #3, are you sure you put a checkmark for 'disk drives' under 'local resources' ?  do you see them listed in the server's 'mycomputer' icon?

note that you can only push and pull from the server this way, not push/pull from the local desktop.  

terminal server is an awesome tool; when configured right, these problems dont happen
0
Acronis Data Cloud 7.8 Enhances Cyber Protection

A closer look at five essential enhancements that benefit end-users and help MSPs take their cloud data protection business further.

B HCommented:
the disk full write protected error might be generated by what you're trying to copy TO and not from...  if you browse to \\tsclient\c\test\  and copy 'file.ext'... and then try to paste it into the C drive of the server (c:\) you probably will get that error.  but if you paste it into your server-side mydocuments, it'll be fine.

in outlook, from the server, you can attach things like normal... hit the paperclip icon, and 'browse' to 'my computer', 'other drives', "C on localname", folder, etc.   or you can just type \\tsclient\x\foldername in the line inside the browse window and hit enter, it'll walk you there and you can find what you want
0
okamonAuthor Commented:
Yes, i did put a checkmark for 'disk drives' under 'local resources.

I just joined the TS to domain as a member server. But I got " the local policy of this system does not permit you to logon interactively."

I went to the TS and gpedit.msc, / Local Computer Policy > Computer Configuration > Windows Settings > Security Settings > Local Policies > User Rights Assignment

I added the TS group in "Allow Log on Locally". (I created the TSgroup in DC and added users to that Group). Gpupdate /force on both DC and TS, no luck. I even rebooted the TS.
0
okamonAuthor Commented:
Do I have to add TSgroup in the "Local users and groups/ groups / remote desktop users " in TS ??
0
B HCommented:
log into the terminal server as administrator, fire up administrative tools, terminal server configuration
right click the thing at the right "rdp-something", properties, security
in here, add the users/groups you want, and give them the bottom two checkmarks

while in here, you might look at the other tabs and make sure there's no checkmark to indicate "disable local drives", because this would override whatever setting you chose at the client before connecting.

in active directory on the domain controller, open one of the users, find the 'termianl services' tab, and make sure they are not set for 'deny logon to terminal servers'

0
B HCommented:
oh - when your users are logging into the terminal server, now that it is a member of the domain, make sure in the login box they select the domain name and NOT the one that says "this computer".  they're no longer logging in locally to the terminal server, they're getting a session as a domain user
0
okamonAuthor Commented:
I just made it work by adding TSgroup in the "Local users and groups/ groups / remote desktop users " in TS . It's the same as  "fire up administrative tools, terminal server configuration
right click the thing at the right "rdp-something", properties, security
in here, add the users/groups you want, and give them the bottom two checkmark"


I got it now. i think the user can only copy to their folders, or where they have write permission on network share.

But still, I personally think it's not a very good solution for non-tek savvy users, they will get so confused.
I think the easiest way is just to use ZenApp, plus it's free. What do you think?
0
okamonAuthor Commented:
Just want to confirm with you...
let say in TS, if the user type something in office word and they want to print out, they can just print right in the TS server (printer has to be setup first)

but if they want to send that word doc through email and they have to configure the outlook in TS or copy the word doc to their folder and send it through the outlook on their own desktop (if outlook is installed on their desktop), anything better way you can think of?
0
B HCommented:
"I got it now. i think the user can only copy to their folders, or where they have write permission on network share. "

that's exactly correct - the whole point of file security

i've never personally used zenapp, but i'll look into it when i have time - i imagine it probably pushes the applications from a server to the users local desktop.  this is good, if you just need to run applications that are light... but if they're big huge programs or require a lot of back and forth traffic, you might be faster with terminal server.

once the users get used to clicking 'connect', they get the hang of it.  our company has about 140 users that work in terminal server all day, from 10 states.  their local computers are either thin clients, or cheap old 333mhz machines running win2k.  and that's fine because all the processing is done on the terminal server.

TS is perfect for some companies, good for others, bad for others... only you can decide really.

besides being able to connect from any computer in the world and see the same stuff they're used to, you don't need to manage/protect the local desktop as much.  we don't even run antivirus on the client workstations because from their local desktops they can't get any sort of internet access other than remote desktop
0
B HCommented:
"but if they want to send that word doc through email and they have to configure the outlook in TS or copy the word doc to their folder and send it through the outlook on their own desktop (if outlook is installed on their desktop)"

that's true... but typically a TS is going to be very close to the exchange server, so you would install outlook on the TS and it would be available for all users who log into it.  you can also set up outlook web access on your exchange server, and they can get an outlook-like interface from internet explorer from any computer anywhere

"and they want to print out, they can just print right in the TS server (printer has to be setup first)"
pretty much yes - but, their local printer will come with them to the terminal server when they connect.  with a few gotcha's:

- the server needs to have a driver for their printer IF the client driver is not compatible with 2003.  this isn't usually the case because XP and 2003 are so close on the back end

- if they use an IP-based printer, there's a registry entry you need to add on the client.  by default, only LPT and USB printers come with them.  the registry entry is here:
hkey current user, software, microsoft, terminal server client, addins, RDPDR
make a new dword value there, called FilterQueueType and give it a hex value of FFFFFFFF


0
B HCommented:
i see free trials for xenapp, but dont see anywhere that says it's free :)

you can get a developer or beta version for free, but i wouldn't want to run this in production... plus it's probably a violation of a few licensing rules

of course, terminal server requires licenses for more than 2 concurrent users... and a decent terminal server can only handle 25 or so users at the same time... so... up to you to weigh the options and costs
0
okamonAuthor Commented:
Thank you so much!!! you really helped me out!
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft Server OS

From novice to tech pro — start learning today.