terminal server lock down help

[Murugs]

Hello

I have configured terminal server and it is working fine. Users login to enter orders in the ERP application. IN GPO - In Administrative Templates/Windows Components/Terminal Services/Start a program on connection I give my ERP program path and it works fine. with this setting, I see just the ERP app and dont see anything..I mean... nothing on desktop,no start menu etc..This is what I want..

But now whenever user logs in, in addition to the ERP app, I want to open a shared folder in the network and still have the same lock down setting..

So I write a batch file to open the app and open the shared drive folder...and enter in the GPO settings....It works but the desktop is not locked..I can now see the startmenu etc...How do I basically open the ERP app and shared folder but at the sametime lock down the desktop completely.

below is the batch file script what I use

%SystemRoot%\explorer.exe "\\servername\share\folder"

start "" "c:\Program Files\JBA\JBA.exe"

Any help would be appreciated.

Muru

 

[Dublin73]

see my post here....

http://www.tek-tips.com/viewthread.cfm?qid=1345772

 

[Murugs]

Dublin73..Thanks for the answer..But I am not sure whether you understand my question correctly..It is not a permission issue I am facing..

All I want is when my terminal server user logs in..just see the ERP app window and a shared folder window..In that share folder there will be some pdf files and then can click on a pdf file to load for some tutorials..

am i asking too much..

 

[Dublin73]

with "Access Based Enumeration" you only see the icons that you have permissions over. In other words... if a Notepad icon is in your Start Menu.. and you don't have permissions over it, you simply won't see it or know that it's even there....

even simpler, use just desktop redirection within group policy to redirect everyone to a shared folder on your network for their desktop. Within this desktop folder place two things... one, your exe to launch your application and two, your pdf folder

do the same for your Start menu.see link

http://technet.microsoft.com/en-us/library/cc786749.aspx

 

[Murugs]

Dublin73..thanks for your support..

I tried folder redirection/start meny redirection..but I still see the desktop etc..I cannot get it to work at all.