Solved

Terminal Server Start Pannel

Posted on 2013-06-01
6
339 Views
Last Modified: 2013-06-03
Hi Experts,

I hope you are well?

Does anyone know how to lock down a start panel for terminal server users so as they can only see office application, and other application you pre-approve there, but nothing else via gpo or other means?
0
Comment
Question by:FSIFM
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
6 Comments
 
LVL 6

Expert Comment

by:chlebi
ID: 39213237
What I do is redirect Start menu to a network location (so that all users pick it from one point). Furthermore there I simply use NTFS permissions on the program shortcuts for various AD groups to limit what eople can run/see.
0
 
LVL 4

Author Comment

by:FSIFM
ID: 39213242
Hi Chlebi,

I've tried a redirection on the start menu but unfortunately they still see more than i want?
I have, using system, restricted the applications that users can run, but still, i'd rather them not see other applications in their start panel?
0
 
LVL 6

Expert Comment

by:chlebi
ID: 39213281
Did you try to hide items on the network share via permissions (ntfs)? That should work...
0
Office 365 Training for Admins - 7 Day Trial

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

 
LVL 4

Author Comment

by:FSIFM
ID: 39213287
Thats the weird thing. Common things like accessories appear there but things like office, citrix and other folders that they can see in their start menu, dont, and as such i cant control them?
0
 
LVL 6

Accepted Solution

by:
chlebi earned 500 total points
ID: 39213372
Then you must be missing some permissions. If you redirect Start menu to a network location then basically when users click there then the folder where you point to just lists. So in Theory you can have 1-millions items there. Of course users need appropriate share and ntfs permissions to read contents of that share.
0
 
LVL 4

Author Comment

by:FSIFM
ID: 39215459
Fixed it! i needed to remove permissions from the default start menu location in program data. Soon as i did that it showed only the folders i had in the mapped location
0

Featured Post

Are your AD admin tools letting you down?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Active Directory security has been a hot topic of late, and for good reason. With 90% of the world’s organization using this system to manage access to all parts of their IT infrastructure, knowing how to protect against threats and keep vulnerabil…
I was prompted to write this article after the recent World-Wide Ransomware outbreak. For years now, System Administrators around the world have used the excuse of "Waiting a Bit" before applying Security Patch Updates. This type of reasoning to me …
This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …

691 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question