Restricting RD users

[maya14]

How can i restrict SBS remote desktop users from accessing local drives on server or other desktops. I need some users to only use a certain application on a server/desktop.
Not sure if this is at all possible?

 

[58sniper]

Remote Desktop connects them to their PC. They only have access to what their account is granted while on their PC.

Pat Richard
Microsoft Exchange MVP

 

[maya14]

If users connect to pc or server with remote desktop they can browse all local drives or access software installed on the remote pc or server.

 

[58sniper]

Users shouldn't be able to RDP into the server. Ever.

If they are using

http://server/remote

to get to the Remote Access on the server, they should then just pick their workstation and connect.

Pat Richard
Microsoft Exchange MVP

 

[maya14]

I don’t want normal users to remote desktop to the server. Only Admin have that rights. Let me explain my problem in detail:
I need to setup users at branch office to remote desktop to pc or standalone 2003 server to access certain application. I only want them to have access to the application and nothing else. Branch office will be connected via VPN to SBS 2003 but I’m not sure if they are going the domain or workgroup route.
Also I need them to print at branch office while working on remote desktop at HO pc.

 

[58sniper]

SBS is only a domain - not a workgroup. And, it doesn't support Terminal Services for users. That would require a separate server.

Once that's in place, you can use GPOs to lockdown the TS box so that they can't do bad things. This has been discussed here before, so I'm sure you'll find some good threads already here.

Pat Richard
Microsoft Exchange MVP