<div>
<div class="content wysiwyg-content">
I'm trying to find an answer to something fairly basic, however, I'm getting to the point where I'm thinking that this is not possible. I wanted to bounce it off you folks.<br />
<br />
So I have a Terminal Server farm that hosts various RemoteApps that is delivered to my users. This is the only information they need to access on the Terminal Server, works just fine. What I'm trying to prevent is the ability for the users to log onto the Terminal Server in full desktop mode. Since all of the apps they need are available via RemoteApp, there is no reason for a user to preform a full desktop login and I'd like to close this hole so a user can't login this way and run amuck.<br />
<br />
Is this possible to do somehow? The environment is currently 2008 R2.
</div>
</div>


I'm trying to find an answer to something fairly basic, however, I'm getting to the point where I'm thinking that this is not possible. I wanted to bounce it off you folks.

So I have a Terminal Server farm that hosts various RemoteApps that is delivered to my users. This is the only information they need to access on the Terminal Server, works just fine. What I'm trying to prevent is the ability for the users to log onto the Terminal Server in full desktop mode. Since all of the apps they need are available via RemoteApp, there is no reason for a user to preform a full desktop login and I'd like to close this hole so a user can't login this way and run amuck.

Is this possible to do somehow? The environment is currently 2008 R2.

Terminal Services Preventing Full Desktop Login

Windows Server 2008 and Windows Server 2008 R2, based on the Microsoft Vista codebase, is the last 32-bit server operating system released by Microsoft. It has a number of versions, including including Foundation, Standard, Enterprise, Datacenter, Web, HPC Server, Itanium and Storage; new features included server core installation and Hyper-V.

Windows Server 2008

Remote access may refer to the connection to a data-processing system from a remote location, for example through a virtual private network remote desktop software, terminal emulation, or the activation of features of a business telephone system from outside the business's premises.