Terminal Services

[ciscotx]

OK, I have a server running windows 2003, I am using that server to Share quickbooks on a network environment and some users access it through RDP from different locations... My problem is that those users are admins on that server right now... I now there is a way on how to setup that when a user logs in just to send it to an specific folder or just one application. In other words not to leave the server wide open for users to mess with... Another thing this server is not running Active directory nor as a DNS server... Any ideas on how to restrict that?

 

[pgaliardo]

Sounds like you are referring to a Published Application. I think this requires Citrix. Not sure if RDP has the ability to do this on it's own.

Do users need to be admins to run Quickbooks? I would remove them from the admin group and also do a search on locking down terminal services. You should apply this through group policy.

 

[ciscotx]

No, users do not have to be admins in order to run Quickbooks... But if user is member of the users group it would not let me log in into the server... It gives me a message which I don't have the exact message right now with me...

 

[Scotsdude]

Modify the Remote Desktop shortcut....theres an option just to run one app. When they exit the app, it will log them off

------------------------------------------------------
Matt
Life is all shadows and dust.
Live it up with women and wine while you can

 

[pgaliardo]

It's probably 1 of 2 problems that I can think of.
First, did you install Terminal Services in user mode and purchase the necessary licenses? Or are you just running in Remote Admin mode in which only administrators can access it.

The second issue would only apply if you already use Citrix. Let me know more about your setup and we can fihure it out.

 

[pgaliardo]

Scotdude is correct. You can connect to a specific application through RDP, so you won't require Citrix. I would still get them out of the admin group though.

 

[ciscotx]

Ok, when I remove the users from the Administrators group I get the message saying cannot log in interactevely... I guess it has to do with the Default policy on the server itself?

 

[TheLad]

A standard user (non administrator) has to be a member of the Remote Desktop Users group in order to use RDP

--------------------------------------
"Insert funny comment in here!"
--------------------------------------

 

[ciscotx]

Thanks for all the replies, TheLad is correct just adding the user to the Remote Desktop Users group will do it. And Scotsdude was correct about the setting in Remote Desktop you can point it to go to an specific program, when the users closes the program it logs off the user... Thanks for everything guys...