Solved

Microsoft Server 2008 R2 Terminal Services

Posted on 2013-06-30
2
425 Views
Last Modified: 2013-07-01
My company has a published remote app that users used to run a program on our terminal server.  Currently the user can log in by clicking on the desktop icon for the remote app or connect to the terminal server through the old terminal server connection method and run the application.
Is it possible to deny remote desktop access to members of a user group but the user can still run the application through the published app. approach?
Any help would be appreciated.
0
Comment
Question by:PhilChapmanJr
2 Comments
 
LVL 26

Accepted Solution

by:
ronnypot earned 500 total points
ID: 39289213
Hi,

There isn't a out of the box way to make this happen. But there are some workarounds possible. I have done this once by creating a script that is executed and direct runs logoff.exe

There are also ways to use group policy or applocker to accomplish this. These threads might help:
http://social.technet.microsoft.com/Forums/windowsserver/en-US/5d17f131-c6d1-49dd-b0b7-83c03c3fedbb/how-to-disable-remote-desktop-access-but-allow-remoteapps-to-run
or
http://social.technet.microsoft.com/Forums/windowsserver/en-US/b298f9c8-4121-4c6a-afa8-5d3dd7868854/allow-remote-app-but-not-remote-desktop
0
 
LVL 2

Author Closing Comment

by:PhilChapmanJr
ID: 39290712
The logoff.exe works ok.  The user still run the remote desktop app.

Thanks for the help.
0

Featured Post

Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

I was asked if I could set up a fax machine so that incoming faxes were delivered to people's Exchange inboxes and so that they could send faxes from their desktops without needing to print the document first.  I knew it was possible but I had no id…
Scenario:  You do full backups to a internal hard drive in either product (SBS or Server 2008).  All goes well for a very long time.  One day, backups begin to fail with a message that the disk is full.  Your disk contains many, many more backups th…
This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

773 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question