Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 948
  • Last Modified:

SBS2011 Standard and Remote Desktop Services Group Policy

Hi,
I have SBS2011 Std installed on one server and on another server I have Windows 2008 R2 with Remote Desktop Services enabled.  Office 2010 and Adobe Reader are the only apps installed so far.  So far everything seems to be working but I have a couple of issues with GPO settings.

One of the things I have noticed is that the RDS Users can still access the Powershell.  As these will be troubled youth using the system I would really like to lock these down but I cannot find a setting to do this.

The second issue is that I would like to ask a big favour, if possible.  Does anyone have a set of GPO settings documented that would provide a basis for me to base my GPO on.  I presume it would be for SBS2008 and Terminal Services but it would at least give me a head start.  I have found that it is VERY different to the 2003 Terminal Servers I have set up in the past and I have got masses of settings enabled so that it now looks a mess.
0
jimcrint
Asked:
jimcrint
1 Solution
 
Glen KnightCommented:
Probably the easiest way to do this is to use a software restriction policy and block powershell.exe, see here for further details: http://technet.microsoft.com/en-us/library/bb457006.aspx

You can also block access to certain control panel applets under the User Configuration\Administrative Templates\Control Panel section of the group policies.

There really isn't any ready built GPO's as everyones will be different depending on their particular needs.
0
 
jimcrintAuthor Commented:
Thanks for your reply.  I realise each situation is unique (re: GPO) but was really only looking for a base template similar to one that was produced for SBS2003 and TS by the girls at smallbiznet (I think).

However, your answer is probably the closest I will get to what I want so full points to you.
0

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now