Remote Desktop Services In Windows Server 2012 for external users.

Posted on 2014-09-14
Last Modified: 2014-09-22
I need users to be able to RDP into the server 2012 and use sage, however I don't want them to see the standard user profile for the administrator. It needs to be locked down for that user.

Any help would be greatly appreciated.
Question by:Geektank
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 3
LVL 95

Expert Comment

by:John Hurst
ID: 40321715
I think it should be much the same as Server 2008. They make an RDP session to the server and log in with their own user name (not administrator). Then they make the connection to Sage.

They may be able to see there is a profile for administrator (anyone can do that on any computer) but they will get "access denied" if they try to access.

Author Comment

ID: 40321731
Yes I already understand this... however I need to remove the administration profile for that user, as so the server represents a basic user profile. I imagine this can be done with the user permissions.
LVL 95

Expert Comment

by:John Hurst
ID: 40321736
I do not understand what you are trying to do. The user will have their own user name that has nothing to do with administrator. So you do not need to remove the administrator profile (and in fact, you probably cannot remove the administrator profile).

What am I missing in your case?
Office 365 Training for Admins

Learn how to provision tenants, synchronize on-premise Active Directory, and implement Single Sign-On with these master level course.  Only from Platform Scholar


Author Comment

ID: 40321741
I need the users to view the remote connection as a basic profile eg. standard windows 8 pc with out all the administration tools.
It's really needs to be locked down for the users.
LVL 95

Accepted Solution

John Hurst earned 250 total points
ID: 40321743
Then remove the administrative tools from the user profile. I did not think admin tools showed up in a standard profile.

Have you made these users members of the administrators group?  It appears you have and then admins can do anything and you cannot lock them down.

Make the users Standard Users  on the Server and on the Windows 8 PC and they should not see admin tools and profiles.

Author Comment

ID: 40321745
I'll give it ago John and check back soon. Thanks John

Assisted Solution

Azurael earned 250 total points
ID: 40321753
Are you familliar with RemoteApp?

This should allow you to run the Sage exe directly via RDP, without actually opening a full RDP session.
This should be much easier than setting up user-specific permissions on your server, and is a bit lighter on network resources.

Article below
LVL 95

Expert Comment

by:John Hurst
ID: 40321755
Be sure to continue to check what authorities users have as admin stuff does not show up for Standard Users. So even if the above works for you, the users should still be constrained.
LVL 95

Expert Comment

by:John Hurst
ID: 40336370
@Geektank  - Thank you and I was happy to help.

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Background Information Recently I have fixed file server permission issues for one of my client. The client has 1800 users and one Windows Server 2008 R2 domain joined file server with 12 TB of data, 250+ shared folders and the folder structure i…
OfficeMate Freezes on login or does not load after login credentials are input.
In this Micro Tutorial viewers will learn how they can get their files copied out from their unbootable system without need to use recovery services. As an example non-bootable Windows 2012R2 installation is used which has boot problems.
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

737 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question