Remote Desktop TS

Hi all

I'm fairly new to Terminal Server/Remote Desktop so need some assistance.
Our company is thinking of moving over to Terminal Services for most of our users. We would use a Thin Client to connect our users to the Server.
Is there a way I could configure a base desktop that could be used by the users? Then also configure this desktop to only allow certain menu options be available in the terminal session?
Who is Participating?
MichaelVHConnect With a Mentor Commented:
Hi there!

What you try to do is perfectly possible.

Depending on what you are looking for, you could for instance use "thin clients" (Wyse does offer some good ones) to directly "boot" into a Terminal Server session.
You can control what these users can do in their session by using GPO's. These GPO's are often used to "lock down" a terminal server.

The latter is certainly something you SHOULD do.


DJMohrAuthor Commented:

We have a test Thin Client; it's a HP t5565; that should be fine as well right?

So; I would control everything via GPO then; no need to do weird configs?

no "weird" configs. GPO's really allow you to control quite a lot of things. Take a look here for more information:

a HP's thin client should be fine, indeed.
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

DJMohrAuthor Commented:
Cool will have a look at the link.
I take I'd have to create a new GPO solely for Terminal services?
That's what I'd suggest. Create a lockdown GPO and assign that GPO to the OU of your Terminal Servers
upalakshithaConnect With a Mentor Commented:
DJMohrAuthor Commented:
Ok, all is going smoothly so far. Thanks for the links upalakshitha, some stuff there that I have been looking for.

Ok, so create a GPO for my terminal users and put some restrictive settings in place which is all good.

One other thing I'm having some trouble with is the user profiles. The default location is as you know C:\Users but i would like to move these profiles to another drive. I have configured the user profile in ADUC to point to \\servername\Share\%username%, this was done under terminal services profile and Profile but it keeps creating a temp profile when I log in. How can I get past this? Or is it a setting in the GPO i need to configure?
will not  it effect for performance if you move profile to \\servername  ?

 you can do it with GPO
DJMohrAuthor Commented:
Thanks guys, our first test ran quite well, so now we are moving into a full test phase with mulitple users.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.