win2k TS: Startup Environment

[shmoes]

Hi there,

I've set up an account where a specific program opens up when the user logs in, it works fine. However i've been told that the user now needs access to one folder file only. I'm not sure how to make only the program the one folder open during startup.

I thought maybe making a batch file would work, but I can't use a link without explorer.exe being started, and if i put explorer.exe in the batch file it loads the whole desktop.

Any ideas are appreciated.

Thanks!

~AZ

 

[chipk]

You're using Terminal Services for this? Why not just share out the single folder that the user needs access to? What you're asking could certainly be done with a combination of strict local policy and file/folder permissions, but TS seems overboard if all you need is access to one folder.

 

[shmoes]

terminal services is the environment, it's global, not optional.

~AZ

 

[shmoes]

keeping in mind this is also only for one user as well.

~AZ

 

[chipk]

If you have to do this with Terminal Services, then your best bet is to create a restricted user account or group (still obviously have to have rights to Terminal Serve in), and restrict access to only those data folders that the user needs. You can lock down everything with GPO or Local Policy from removing the start menu to restricting which programs can run.

This article is specific to TS, others have more details on GPO:

http://technet.microsoft.com/en-us/library/cc782067.aspx

http://articles.techrepublic.com.com/5100-10878_11-1059493.html

http://technet.microsoft.com/en-us/library/bb742376.aspx