How to limit certain user to have MS Project 2007 available on Terminal Server 2003 ?

Hi All,

How can I limit only certain users (eg. the manager only) to have access to MS Project 2007 in my Terminal Server 2003 environment ?

Because the terminal server is use by many people and we don't want to buy unused MS project 2007 for those people not using it.

is it through Group Policy or something like that ???

Thanks in advance.
LVL 9
Senior IT System EngineerIT ProfessionalAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

AnuroopsunddCommented:
Most simple way will be to resrict the permission on project 2007 install folder to specific users... so no other users will be able to execute anything..
0
Senior IT System EngineerIT ProfessionalAuthor Commented:
ok, so how do I package or put the installation file ?

do I install the application first on the terminal server or configure it in the GPO ?
0
chris-burnsCommented:
Quite easy actually.

CMD -> change user /install
install project 2007
once complete
CMD -> change user /execute

then change permissions on the executable as per above.
0
ComputerBeastCommented:
You can configure poledit to restrict the users but there may other options.

1. Dont configure the users as members of "Power Users" or/and "Administrator" in the local machine/domain.

2. Use "gpedit.msc" to configure local policy. To eliminate the policy to
affect local "Administrators" group, configure NTFS permission to deny
access to "C:\WINDOWS\system32\GroupPolicy".

3. Add the Win 2003 TS to Win 2003 domain - and use the nice GPO
to restrict users.

4. Disable files download from the Internet Explorer + restrict access
to local drive + disable local client disk mount/mapping to the
Terminal Server.


5. If the users use only one program - configure it to auto lunch when the user
Logon.

Note: please refer to the link below for further assistance on this:
http://support.microsoft.com/default.aspx?scid=kb;en-us;231287

Thank you.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.