Solved

Microsoft Server 2008 R2 Terminal Services

Posted on 2013-06-30
2
426 Views
Last Modified: 2013-07-01
My company has a published remote app that users used to run a program on our terminal server.  Currently the user can log in by clicking on the desktop icon for the remote app or connect to the terminal server through the old terminal server connection method and run the application.
Is it possible to deny remote desktop access to members of a user group but the user can still run the application through the published app. approach?
Any help would be appreciated.
0
Comment
Question by:PhilChapmanJr
2 Comments
 
LVL 26

Accepted Solution

by:
ronnypot earned 500 total points
ID: 39289213
Hi,

There isn't a out of the box way to make this happen. But there are some workarounds possible. I have done this once by creating a script that is executed and direct runs logoff.exe

There are also ways to use group policy or applocker to accomplish this. These threads might help:
http://social.technet.microsoft.com/Forums/windowsserver/en-US/5d17f131-c6d1-49dd-b0b7-83c03c3fedbb/how-to-disable-remote-desktop-access-but-allow-remoteapps-to-run
or
http://social.technet.microsoft.com/Forums/windowsserver/en-US/b298f9c8-4121-4c6a-afa8-5d3dd7868854/allow-remote-app-but-not-remote-desktop
0
 
LVL 2

Author Closing Comment

by:PhilChapmanJr
ID: 39290712
The logoff.exe works ok.  The user still run the remote desktop app.

Thanks for the help.
0

Featured Post

Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you migrate a Terminal Server licenses server inside the 2008 server family, you can takte advantage of the build-in migration tool. If you like to migrate an older 2003 Server (and the installed client CALs) to a 2008 R2 server for example, you …
You might have come across a situation when you have Exchange 2013 server in two different sites (Production and DR). After adding the Database copy in ECP console it displays Database copy status unknown for the DR exchange server. Issue is strange…
This tutorial will walk an individual through locating and launching the BEUtility application and how to execute it on the appropriate database. Log onto the server running the Backup Exec database. In a larger environment, this would generally be …
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

837 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question