Does Win 2008 R2 Remote Desktop allow users with limited rights and access

Right now I'm using RDP to access my Win 2008 R2 Std server as Administrator so I can run certain apps., but I need to give a user access to this server remotely with limited access (no Admin rights) to run these apps.
They only need to run a Console App from this server. Does RDP allow this with their own login and limited machine rights?
Would they need to use MSTSC.exe or is there a Web solution?
LVL 1
TARJrAsked:
Who is Participating?

Improve company productivity with a Business Account.Sign Up

x
 
50calConnect With a Mentor Commented:
If you look into remote desktop services (Added role) this allows you to setup a terminal server like environment, if you utilise the remote apps feature this will allow you to publish certain apps to the user.
These apps are then accessible via a web page and appear to launch on the local machine although a connection to the server is established.

http://www.microsoft.com/windowsserver2008/en/us/rds-product-home.aspx

50cal.
0
 
Krzysztof PytkoSenior Active Directory EngineerCommented:
Place those users into local group called Remote Desktop Users. They will be able to log in to that server (if it is not DC) and run applications there. They will work as regular users, so the won't have administrative rights. They still can create folders and access other applications. Implementing TS requires additional licenses for that mode, so if you do not plan to use this functionality, you should use Remote Desktop Client for your users and connect to server directly.
0
 
TARJrAuthor Commented:
What would be the quickest way to do this? The server is Stand-alone (no DC)... It looks like the Remote App/ RD Web Access requires IIS configuration...yuk.
Can I let them run mstsc with their login? Will I need TS licenses to do this? Where do you get these lic. never bought these before.

Thanks.
0
The 14th Annual Expert Award Winners

The results are in! Meet the top members of our 2017 Expert Awards. Congratulations to all who qualified!

 
Krzysztof PytkoConnect With a Mentor Senior Active Directory EngineerCommented:
The easiest way is add them to Remote Desktop Users and use mstsc but you have to remember. Indefault (free) mode administrative mode, you have only 2 concurent connections.
0
 
50calCommented:
It will be limited to 2 connections.

50cal.
0
 
TARJrAuthor Commented:
Actually 2 connections is perfect, but how do I limit their rights (no machine reboot, no Control Panel access,  no IE access, etc)
0
 
Krzysztof PytkoSenior Active Directory EngineerCommented:
use gpedit.msc on that server and set proper rights for those users or group
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.