Windows NT TS Profiles ???

  • Thread starter Thread starter sihfmis
  • Start date Start date
S

sihfmis

I am at a point where I am really confused. I am trying to setup a TS test
user that will access specific applications (ie-MS Office Suite). Does
anyone have a good example of what the GP setup would look like? Or, is it
controlled somewhere else? If so, where and what does it look like?
 
What exactly is it that you want to do?

You can define a Terminal Services specific roaming profile for users
(in their AD user account or in a Group Policy), but that is most
useful when users log on to several load balanced Terminal Servers,
and to preserve disk space on the TS.
You can define a custom Desktop and Start Menu (in a Group Policy),
which is most useful to enhance the user experience (they see only
what they need to see), but it doesn't provide security.
You can limit access to the file system with NTFS permissions to keep
users out of sensitive areas of the server.
You can define a Starting application (in the rdp client, a Group
Policy or on the TS) if the user needs to run a single application
only.

_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

=?Utf-8?B?c2loZm1pcw==?= <sihfmis@discussions.microsoft.com> wrote
on 17 aug 2007 in microsoft.public.windows.terminal_services:

> I am at a point where I am really confused. I am trying to
> setup a TS test user that will access specific applications
> (ie-MS Office Suite). Does anyone have a good example of what
> the GP setup would look like? Or, is it controlled somewhere
> else? If so, where and what does it look like?
 
The part about "custom desktop and startup menu", what would that look like?
This is where I run into confusion. What would a typical configuration look
like?

"Vera Noest [MVP]" wrote:

> What exactly is it that you want to do?
>
> You can define a Terminal Services specific roaming profile for users
> (in their AD user account or in a Group Policy), but that is most
> useful when users log on to several load balanced Terminal Servers,
> and to preserve disk space on the TS.
> You can define a custom Desktop and Start Menu (in a Group Policy),
> which is most useful to enhance the user experience (they see only
> what they need to see), but it doesn't provide security.
> You can limit access to the file system with NTFS permissions to keep
> users out of sensitive areas of the server.
> You can define a Starting application (in the rdp client, a Group
> Policy or on the TS) if the user needs to run a single application
> only.
>
> _________________________________________________________
> Vera Noest
> MCSE, CCEA, Microsoft MVP - Terminal Server
> TS troubleshooting: http://ts.veranoest.net
> ___ please respond in newsgroup, NOT by private email ___
>
> =?Utf-8?B?c2loZm1pcw==?= <sihfmis@discussions.microsoft.com> wrote
> on 17 aug 2007 in microsoft.public.windows.terminal_services:
>
> > I am at a point where I am really confused. I am trying to
> > setup a TS test user that will access specific applications
> > (ie-MS Office Suite). Does anyone have a good example of what
> > the GP setup would look like? Or, is it controlled somewhere
> > else? If so, where and what does it look like?
>
 
When you use a Group Policy to configure a custom Start Menu and
Desktop, you simply redirect those two features to 2 empty folders
on a file share.
Then it's up to you to populate the folders.
For example: if you want your users to have only Notepad and
Calculator shortcuts in their Start Menu, then you only copy those
shortcuts to your custom Start Menu. Same with the desktop folder:
you start with an empty folder and put only those shortcuts in it
that you want your users to have easy access to.

_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
*----------- Please reply in newsgroup -------------*

=?Utf-8?B?c2loZm1pcw==?= <sihfmis@discussions.microsoft.com> wrote
on 20 aug 2007:

> The part about "custom desktop and startup menu", what would
> that look like? This is where I run into confusion. What would
> a typical configuration look like?
>
> "Vera Noest [MVP]" wrote:
>
>> What exactly is it that you want to do?
>>
>> You can define a Terminal Services specific roaming profile for
>> users (in their AD user account or in a Group Policy), but that
>> is most useful when users log on to several load balanced
>> Terminal Servers, and to preserve disk space on the TS.
>> You can define a custom Desktop and Start Menu (in a Group
>> Policy), which is most useful to enhance the user experience
>> (they see only what they need to see), but it doesn't provide
>> security. You can limit access to the file system with NTFS
>> permissions to keep users out of sensitive areas of the server.
>> You can define a Starting application (in the rdp client, a
>> Group Policy or on the TS) if the user needs to run a single
>> application only.
>>
>> _________________________________________________________
>> Vera Noest
>> MCSE, CCEA, Microsoft MVP - Terminal Server
>> TS troubleshooting: http://ts.veranoest.net
>> ___ please respond in newsgroup, NOT by private email ___
>>
>> =?Utf-8?B?c2loZm1pcw==?= <sihfmis@discussions.microsoft.com>
>> wrote on 17 aug 2007 in
>> microsoft.public.windows.terminal_services:
>>
>> > I am at a point where I am really confused. I am trying to
>> > setup a TS test user that will access specific applications
>> > (ie-MS Office Suite). Does anyone have a good example of
>> > what the GP setup would look like? Or, is it controlled
>> > somewhere else? If so, where and what does it look like?
 
Okay but what about the items that come through the "all users" properties?
This is where I am getting tripped up.

"Vera Noest [MVP]" wrote:

> When you use a Group Policy to configure a custom Start Menu and
> Desktop, you simply redirect those two features to 2 empty folders
> on a file share.
> Then it's up to you to populate the folders.
> For example: if you want your users to have only Notepad and
> Calculator shortcuts in their Start Menu, then you only copy those
> shortcuts to your custom Start Menu. Same with the desktop folder:
> you start with an empty folder and put only those shortcuts in it
> that you want your users to have easy access to.
>
> _________________________________________________________
> Vera Noest
> MCSE, CCEA, Microsoft MVP - Terminal Server
> TS troubleshooting: http://ts.veranoest.net
> *----------- Please reply in newsgroup -------------*
>
> =?Utf-8?B?c2loZm1pcw==?= <sihfmis@discussions.microsoft.com> wrote
> on 20 aug 2007:
>
> > The part about "custom desktop and startup menu", what would
> > that look like? This is where I run into confusion. What would
> > a typical configuration look like?
> >
> > "Vera Noest [MVP]" wrote:
> >
> >> What exactly is it that you want to do?
> >>
> >> You can define a Terminal Services specific roaming profile for
> >> users (in their AD user account or in a Group Policy), but that
> >> is most useful when users log on to several load balanced
> >> Terminal Servers, and to preserve disk space on the TS.
> >> You can define a custom Desktop and Start Menu (in a Group
> >> Policy), which is most useful to enhance the user experience
> >> (they see only what they need to see), but it doesn't provide
> >> security. You can limit access to the file system with NTFS
> >> permissions to keep users out of sensitive areas of the server.
> >> You can define a Starting application (in the rdp client, a
> >> Group Policy or on the TS) if the user needs to run a single
> >> application only.
> >>
> >> _________________________________________________________
> >> Vera Noest
> >> MCSE, CCEA, Microsoft MVP - Terminal Server
> >> TS troubleshooting: http://ts.veranoest.net
> >> ___ please respond in newsgroup, NOT by private email ___
> >>
> >> =?Utf-8?B?c2loZm1pcw==?= <sihfmis@discussions.microsoft.com>
> >> wrote on 17 aug 2007 in
> >> microsoft.public.windows.terminal_services:
> >>
> >> > I am at a point where I am really confused. I am trying to
> >> > setup a TS test user that will access specific applications
> >> > (ie-MS Office Suite). Does anyone have a good example of
> >> > what the GP setup would look like? Or, is it controlled
> >> > somewhere else? If so, where and what does it look like?
>
 
Can't you just delete the ones you don't want from
C:\Documents and Settings\All Users\Start Menu?
_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

=?Utf-8?B?c2loZm1pcw==?= <sihfmis@discussions.microsoft.com> wrote
on 20 aug 2007 in microsoft.public.windows.terminal_services:

> Okay but what about the items that come through the "all users"
> properties? This is where I am getting tripped up.
>
> "Vera Noest [MVP]" wrote:
>
>> When you use a Group Policy to configure a custom Start Menu
>> and Desktop, you simply redirect those two features to 2 empty
>> folders on a file share.
>> Then it's up to you to populate the folders.
>> For example: if you want your users to have only Notepad and
>> Calculator shortcuts in their Start Menu, then you only copy
>> those shortcuts to your custom Start Menu. Same with the
>> desktop folder: you start with an empty folder and put only
>> those shortcuts in it that you want your users to have easy
>> access to.
>>
>> _________________________________________________________
>> Vera Noest
>> MCSE, CCEA, Microsoft MVP - Terminal Server
>> TS troubleshooting: http://ts.veranoest.net
>> *----------- Please reply in newsgroup -------------*
>>
>> =?Utf-8?B?c2loZm1pcw==?= <sihfmis@discussions.microsoft.com>
>> wrote on 20 aug 2007:
>>
>> > The part about "custom desktop and startup menu", what would
>> > that look like? This is where I run into confusion. What
>> > would a typical configuration look like?
>> >
>> > "Vera Noest [MVP]" wrote:
>> >
>> >> What exactly is it that you want to do?
>> >>
>> >> You can define a Terminal Services specific roaming profile
>> >> for users (in their AD user account or in a Group Policy),
>> >> but that is most useful when users log on to several load
>> >> balanced Terminal Servers, and to preserve disk space on the
>> >> TS. You can define a custom Desktop and Start Menu (in a
>> >> Group Policy), which is most useful to enhance the user
>> >> experience (they see only what they need to see), but it
>> >> doesn't provide security. You can limit access to the file
>> >> system with NTFS permissions to keep users out of sensitive
>> >> areas of the server. You can define a Starting application
>> >> (in the rdp client, a Group Policy or on the TS) if the user
>> >> needs to run a single application only.
>> >>
>> >> _________________________________________________________
>> >> Vera Noest
>> >> MCSE, CCEA, Microsoft MVP - Terminal Server
>> >> TS troubleshooting: http://ts.veranoest.net
>> >> ___ please respond in newsgroup, NOT by private email ___
>> >>
>> >> =?Utf-8?B?c2loZm1pcw==?= <sihfmis@discussions.microsoft.com>
>> >> wrote on 17 aug 2007 in
>> >> microsoft.public.windows.terminal_services:
>> >>
>> >> > I am at a point where I am really confused. I am trying
>> >> > to setup a TS test user that will access specific
>> >> > applications (ie-MS Office Suite). Does anyone have a
>> >> > good example of what the GP setup would look like? Or, is
>> >> > it controlled somewhere else? If so, where and what does
>> >> > it look like?
 
I do not know, I will try it.

"Vera Noest [MVP]" wrote:

> Can't you just delete the ones you don't want from
> C:\Documents and Settings\All Users\Start Menu?
> _________________________________________________________
> Vera Noest
> MCSE, CCEA, Microsoft MVP - Terminal Server
> TS troubleshooting: http://ts.veranoest.net
> ___ please respond in newsgroup, NOT by private email ___
>
> =?Utf-8?B?c2loZm1pcw==?= <sihfmis@discussions.microsoft.com> wrote
> on 20 aug 2007 in microsoft.public.windows.terminal_services:
>
> > Okay but what about the items that come through the "all users"
> > properties? This is where I am getting tripped up.
> >
> > "Vera Noest [MVP]" wrote:
> >
> >> When you use a Group Policy to configure a custom Start Menu
> >> and Desktop, you simply redirect those two features to 2 empty
> >> folders on a file share.
> >> Then it's up to you to populate the folders.
> >> For example: if you want your users to have only Notepad and
> >> Calculator shortcuts in their Start Menu, then you only copy
> >> those shortcuts to your custom Start Menu. Same with the
> >> desktop folder: you start with an empty folder and put only
> >> those shortcuts in it that you want your users to have easy
> >> access to.
> >>
> >> _________________________________________________________
> >> Vera Noest
> >> MCSE, CCEA, Microsoft MVP - Terminal Server
> >> TS troubleshooting: http://ts.veranoest.net
> >> *----------- Please reply in newsgroup -------------*
> >>
> >> =?Utf-8?B?c2loZm1pcw==?= <sihfmis@discussions.microsoft.com>
> >> wrote on 20 aug 2007:
> >>
> >> > The part about "custom desktop and startup menu", what would
> >> > that look like? This is where I run into confusion. What
> >> > would a typical configuration look like?
> >> >
> >> > "Vera Noest [MVP]" wrote:
> >> >
> >> >> What exactly is it that you want to do?
> >> >>
> >> >> You can define a Terminal Services specific roaming profile
> >> >> for users (in their AD user account or in a Group Policy),
> >> >> but that is most useful when users log on to several load
> >> >> balanced Terminal Servers, and to preserve disk space on the
> >> >> TS. You can define a custom Desktop and Start Menu (in a
> >> >> Group Policy), which is most useful to enhance the user
> >> >> experience (they see only what they need to see), but it
> >> >> doesn't provide security. You can limit access to the file
> >> >> system with NTFS permissions to keep users out of sensitive
> >> >> areas of the server. You can define a Starting application
> >> >> (in the rdp client, a Group Policy or on the TS) if the user
> >> >> needs to run a single application only.
> >> >>
> >> >> _________________________________________________________
> >> >> Vera Noest
> >> >> MCSE, CCEA, Microsoft MVP - Terminal Server
> >> >> TS troubleshooting: http://ts.veranoest.net
> >> >> ___ please respond in newsgroup, NOT by private email ___
> >> >>
> >> >> =?Utf-8?B?c2loZm1pcw==?= <sihfmis@discussions.microsoft.com>
> >> >> wrote on 17 aug 2007 in
> >> >> microsoft.public.windows.terminal_services:
> >> >>
> >> >> > I am at a point where I am really confused. I am trying
> >> >> > to setup a TS test user that will access specific
> >> >> > applications (ie-MS Office Suite). Does anyone have a
> >> >> > good example of what the GP setup would look like? Or, is
> >> >> > it controlled somewhere else? If so, where and what does
> >> >> > it look like?
>
 
Back
Top