Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

SBS2011 Standard and Remote Desktop Services Group Policy

Posted on 2011-03-17
2
Medium Priority
?
946 Views
Last Modified: 2013-11-21
Hi,
I have SBS2011 Std installed on one server and on another server I have Windows 2008 R2 with Remote Desktop Services enabled.  Office 2010 and Adobe Reader are the only apps installed so far.  So far everything seems to be working but I have a couple of issues with GPO settings.

One of the things I have noticed is that the RDS Users can still access the Powershell.  As these will be troubled youth using the system I would really like to lock these down but I cannot find a setting to do this.

The second issue is that I would like to ask a big favour, if possible.  Does anyone have a set of GPO settings documented that would provide a basis for me to base my GPO on.  I presume it would be for SBS2008 and Terminal Services but it would at least give me a head start.  I have found that it is VERY different to the 2003 Terminal Servers I have set up in the past and I have got masses of settings enabled so that it now looks a mess.
0
Comment
Question by:jimcrint
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 74

Accepted Solution

by:
Glen Knight earned 1000 total points
ID: 35163783
Probably the easiest way to do this is to use a software restriction policy and block powershell.exe, see here for further details: http://technet.microsoft.com/en-us/library/bb457006.aspx

You can also block access to certain control panel applets under the User Configuration\Administrative Templates\Control Panel section of the group policies.

There really isn't any ready built GPO's as everyones will be different depending on their particular needs.
0
 
LVL 1

Author Closing Comment

by:jimcrint
ID: 35169476
Thanks for your reply.  I realise each situation is unique (re: GPO) but was really only looking for a base template similar to one that was produced for SBS2003 and TS by the girls at smallbiznet (I think).

However, your answer is probably the closest I will get to what I want so full points to you.
0

Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Possible fixes for Windows 7 and Windows Server 2008 updating problem. Solutions mentioned are from Microsoft themselves. I started a case with them from our Microsoft Silver Partner option to open a case and get direct support from Microsoft. If s…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This tutorial will give a an overview on how to deploy remote agents in Backup Exec 2012 to new servers. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as connecting to a remote Back…
This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…

721 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question