View Full Version : Easy question: Setup what Apps users can acccess


JOHN MCCARTHY
07-25-2006, 02:51 PM
As I load software on my Terminal Services Server how can I determine what
apps users can view or launch. I am famillar with GPOs but could not find
where it points to specific APPS on the server and what permissions to assign
to Groups.

Do I use the standard Group Policy Editor or is there a mgt console setting
within Terminal Service Management Tools?

Vera Noest [MVP]
07-25-2006, 03:23 PM
I recommended the Group Policy Management Console
http://www.microsoft.com/windowsserver2003/gpmc/default.mspx

You can use NTFS permissions on specific programs (on the file
system), and/or use cusomized redirected desktops with only the
applications that you want users to see, or use Software Restriction
Policies.

324036 - HOW TO: Use Software Restriction Policies in Windows Server
2003
http://support.microsoft.com/?kbid=324036
_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
*----------- Please reply in newsgroup -------------*

=?Utf-8?B?Sk9ITiBNQ0NBUlRIWQ==?=
<JOHNMCCARTHY@discussions.microsoft.com> wrote on 25 jul 2006:

> As I load software on my Terminal Services Server how can I
> determine what apps users can view or launch. I am famillar
> with GPOs but could not find where it points to specific APPS on
> the server and what permissions to assign to Groups.
>
> Do I use the standard Group Policy Editor or is there a mgt
> console setting within Terminal Service Management Tools?

Chris
08-03-2006, 04:03 PM
Will this "console" WORK WITH SERVER 2000 as well? Chris

"Vera Noest [MVP]" wrote:

> I recommended the Group Policy Management Console
> http://www.microsoft.com/windowsserver2003/gpmc/default.mspx
>
> You can use NTFS permissions on specific programs (on the file
> system), and/or use cusomized redirected desktops with only the
> applications that you want users to see, or use Software Restriction
> Policies.
>
> 324036 - HOW TO: Use Software Restriction Policies in Windows Server
> 2003
> http://support.microsoft.com/?kbid=324036
> _________________________________________________________
> Vera Noest
> MCSE, CCEA, Microsoft MVP - Terminal Server
> TS troubleshooting: http://ts.veranoest.net
> *----------- Please reply in newsgroup -------------*
>
> =?Utf-8?B?Sk9ITiBNQ0NBUlRIWQ==?=
> <JOHNMCCARTHY@discussions.microsoft.com> wrote on 25 jul 2006:
>
> > As I load software on my Terminal Services Server how can I
> > determine what apps users can view or launch. I am famillar
> > with GPOs but could not find where it points to specific APPS on
> > the server and what permissions to assign to Groups.
> >
> > Do I use the standard Group Policy Editor or is there a mgt
> > console setting within Terminal Service Management Tools?
>

Vera Noest [MVP]
08-03-2006, 08:41 PM
From Group Policy Management Console: Frequently Asked Questions
(link on the download page):

Q. What are the system requirements?

A. The GPMC can manage both Windows 2000 and Windows Server 2003
domains with Active Directory. In either case, the computer on
which the tool itself runs must have:

• Windows Server 2003 or

• Windows XP Professional with Service Pack 1 (SP1) and the
Microsoft .NET Framework.

Note: When installing GPMC on Windows XP Professional with SP1, a
post-SP1 hotfix is required. This hotfix (Q326469) is included with
GPMC. GPMC Setup prompts you to install Windows XP QFE Q326469, if
it is not already present.

Q. Can I use GPMC to manage a domain that only has Windows 2000
domain controllers?

A. Yes. The GPMC can manage a Windows 2000 domain. However, the
GPMC itself does not run on Windows 2000 computers. To manage a
Windows 2000 domain, you must install GPMC on either a computer
running Windows XP Professional or on a member server running
Windows Server 2003. Note: Since GPMC exposes functionality in both
Windows Server 2003 and Windows 2000, some functionality, such as
Windows Management Instrumentation (WMI) filters and Group Policy
modeling, is not available in Windows 2000 environments.


_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

=?Utf-8?B?Q2hyaXM=?= <Chris@discussions.microsoft.com> wrote on 03
aug 2006 in microsoft.public.win2000.termserv.apps:

> Will this "console" WORK WITH SERVER 2000 as well? Chris
>
> "Vera Noest [MVP]" wrote:
>
>> I recommended the Group Policy Management Console
>> http://www.microsoft.com/windowsserver2003/gpmc/default.mspx
>>
>> You can use NTFS permissions on specific programs (on the file
>> system), and/or use cusomized redirected desktops with only the
>> applications that you want users to see, or use Software
>> Restriction Policies.
>>
>> 324036 - HOW TO: Use Software Restriction Policies in Windows
>> Server 2003
>> http://support.microsoft.com/?kbid=324036
>> _________________________________________________________
>> Vera Noest
>> MCSE, CCEA, Microsoft MVP - Terminal Server
>> TS troubleshooting: http://ts.veranoest.net
>> *----------- Please reply in newsgroup -------------*
>>
>> =?Utf-8?B?Sk9ITiBNQ0NBUlRIWQ==?=
>> <JOHNMCCARTHY@discussions.microsoft.com> wrote on 25 jul 2006:
>>
>> > As I load software on my Terminal Services Server how can I
>> > determine what apps users can view or launch. I am famillar
>> > with GPOs but could not find where it points to specific APPS
>> > on the server and what permissions to assign to Groups.
>> >
>> > Do I use the standard Group Policy Editor or is there a mgt
>> > console setting within Terminal Service Management Tools?