Home > Ask the Windows Security Experts > General Windows networking security Questions & Answers > Limit Windows Remote Desktop users' server rights
Ask The Windows Security Expert: Questions & Answers
EMAIL THIS

Limit Windows Remote Desktop users' server rights

Bradley Dinerman EXPERT RESPONSE FROM: Bradley Dinerman

Pose a Question
Other Windows Security Categories
Meet all Windows Security Experts
Become an Expert for this site


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


>
QUESTION POSED ON: 19 October 2007
We are using Remote Desktop in Windows Server 2003 for server management. The current configuration of the application server allows all Remote Desktop users full control of the server, its files and its data. We want to limit the users' rights by removing their access to Windows Explorer and the DOS command prompt, but when they try to save a report setup within the application, they cannot browse the folders. How can we fix this?

>
EXPERT RESPONSE
The solution to this problem depends on the nature of the application that your Remote Desktop end users are running. If you create shares on the folders that contain the data and then map drive letters to them, the application may allow you to configure it to automatically open/save from that drive letter, bypassing the use of Windows Explorer.

Alternatively, you can configure a startup application in the Terminal Services Configuration administrative console.

  1. Start the console and select the Connections node in the left pane.
  2. In the right pane, double-click RDP-TCP to open its Properties sheet.
  3. Select the Environment tab, and then click the third radio button, "Start the Following Program When The User Logs On."
  4. Enter the full path to the program in the Program Path and File Name field, such as C:Program FilesMicrosoft OfficeOFFICE11winword.exe, and enter just the part in the Start In field, such as C:Program FilesMicrosoft OfficeOFFICE11.
  5. Click OK to save your changes.

The next time a user logs on to that Terminal (application) Server, he will see only the application that you've specified and will not be able to navigate around the server outside of that application.


Sound Off! -   Be the first to post a message to Sound Off!


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


RELATED CONTENT
General Windows networking security
How can I use a GPO to manage Windows user rights?
Is a GPO blocking my VPN security scan?
Set write permissions in Windows network folders
How can I use Group Policy to manage proxy servers?
Why don't I have proper Windows Server 2003 rights to open a GPO?
Windows server access management in Active Directory
File management on a Windows Server 2003 NAS system
Windows Small Business Server 2003 access management
Group Policy settings replace manual proxy settings
Manage Windows network access in Active Directory

Protocols and Services
Group Policy Object security in Windows
Can I prevent network users from installing 3rd party software?
Domain controller penetration testing
Microsoft Rights Management Services: An introduction
Locking down SMTP in Win2K and Server 2003
Windows security update may cause shell extensions to fail
Multiple Connections - Management
Active Directory Federation Services
Finding extra security in R2
Step 6: Distribute the profile to remote users

Configuration and Deployment
DHCP Client Service error affects network security
How to use a GPO to improve Windows folder security
Remote management for Windows system upgrades
How to secure BitLocker configurations
What's new and improved in IPsec in Windows Server 2008
Have my Windows patches actually been installed?
What's hot in Windows security: Ins and outs of Windows Server 2008
Rights management in Windows: Security expert roundup
Set write permissions in Windows network folders
Windows network rights, password policy and network security testing
Configuration and Deployment Research

RELATED RESOURCES
2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
Search Bitpipe.com for the latest white papers and business webcasts
Whatis.com, the online computer dictionary



Search and Browse the Expert Answer Center
Search and browse more than 25,000 question and answer pairs from more than 250 TechTarget industry experts.
Browse our Expert Advice

HomeNewsTopicsITKnowledge ExchangeTipsAsk the ExpertsMultimediaWhite PapersIT DownloadsBlogs
About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
SEARCH 
TechTarget provides enterprise IT professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective IT purchase decisions and managing their organizations' IT projects - with its network of technology-specific Web sites, events and magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Reprints  |  Site Map




All Rights Reserved, Copyright 2004 - 2008, TechTarget | Read our Privacy Policy
  TechTarget - The IT Media ROI Experts