Solved

SBS2011 Standard and Remote Desktop Services Group Policy

Posted on 2011-03-17
2
935 Views
Last Modified: 2013-11-21
Hi,
I have SBS2011 Std installed on one server and on another server I have Windows 2008 R2 with Remote Desktop Services enabled.  Office 2010 and Adobe Reader are the only apps installed so far.  So far everything seems to be working but I have a couple of issues with GPO settings.

One of the things I have noticed is that the RDS Users can still access the Powershell.  As these will be troubled youth using the system I would really like to lock these down but I cannot find a setting to do this.

The second issue is that I would like to ask a big favour, if possible.  Does anyone have a set of GPO settings documented that would provide a basis for me to base my GPO on.  I presume it would be for SBS2008 and Terminal Services but it would at least give me a head start.  I have found that it is VERY different to the 2003 Terminal Servers I have set up in the past and I have got masses of settings enabled so that it now looks a mess.
0
Comment
Question by:jimcrint
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 74

Accepted Solution

by:
Glen Knight earned 250 total points
ID: 35163783
Probably the easiest way to do this is to use a software restriction policy and block powershell.exe, see here for further details: http://technet.microsoft.com/en-us/library/bb457006.aspx

You can also block access to certain control panel applets under the User Configuration\Administrative Templates\Control Panel section of the group policies.

There really isn't any ready built GPO's as everyones will be different depending on their particular needs.
0
 
LVL 1

Author Closing Comment

by:jimcrint
ID: 35169476
Thanks for your reply.  I realise each situation is unique (re: GPO) but was really only looking for a base template similar to one that was produced for SBS2003 and TS by the girls at smallbiznet (I think).

However, your answer is probably the closest I will get to what I want so full points to you.
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

You may have discovered the 'Compatibility View Settings' workaround for making your SBS 2008 Remote Web Workplace 'connect to a computer' section stops 'working around' after a Windows 10 client upgrade.  That can be fixed so it 'works around' agai…
A quick step-by-step overview of installing and configuring Carbonite Server Backup.
This tutorial will give a short introduction and overview of Backup Exec 2012 and how to navigate and perform basic functions. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as conne…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…

738 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question