Remote Desktop Services In Windows Server 2012 for external users.

I need users to be able to RDP into the server 2012 and use sage, however I don't want them to see the standard user profile for the administrator. It needs to be locked down for that user.

Any help would be greatly appreciated.
GeektankAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

JohnBusiness Consultant (Owner)Commented:
I think it should be much the same as Server 2008. They make an RDP session to the server and log in with their own user name (not administrator). Then they make the connection to Sage.

They may be able to see there is a profile for administrator (anyone can do that on any computer) but they will get "access denied" if they try to access.
0
GeektankAuthor Commented:
Yes I already understand this... however I need to remove the administration profile for that user, as so the server represents a basic user profile. I imagine this can be done with the user permissions.
0
JohnBusiness Consultant (Owner)Commented:
I do not understand what you are trying to do. The user will have their own user name that has nothing to do with administrator. So you do not need to remove the administrator profile (and in fact, you probably cannot remove the administrator profile).

What am I missing in your case?
0
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

GeektankAuthor Commented:
I need the users to view the remote connection as a basic profile eg. standard windows 8 pc with out all the administration tools.
It's really needs to be locked down for the users.
0
JohnBusiness Consultant (Owner)Commented:
Then remove the administrative tools from the user profile. I did not think admin tools showed up in a standard profile.

Have you made these users members of the administrators group?  It appears you have and then admins can do anything and you cannot lock them down.

Make the users Standard Users  on the Server and on the Windows 8 PC and they should not see admin tools and profiles.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
GeektankAuthor Commented:
I'll give it ago John and check back soon. Thanks John
0
AzuraelCommented:
Are you familliar with RemoteApp?

This should allow you to run the Sage exe directly via RDP, without actually opening a full RDP session.
This should be much easier than setting up user-specific permissions on your server, and is a bit lighter on network resources.

Article below
http://social.technet.microsoft.com/wiki/contents/articles/10817.publishing-remoteapps-in-windows-server-2012.aspx
0
JohnBusiness Consultant (Owner)Commented:
Be sure to continue to check what authorities users have as admin stuff does not show up for Standard Users. So even if the above works for you, the users should still be constrained.
0
JohnBusiness Consultant (Owner)Commented:
@Geektank  - Thank you and I was happy to help.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft Legacy OS

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.