lockdown suggestions

I've got a 2k term server in application mode. My customer
wants to lock it down so that users can only run a few
chosen applications. Right now this is just a stand alone
server. I want to use group policies to lock down users. Is
there a better way to do this? What are some of the
pitfalls of running a DC, license server, and TS all on the
same box? Do the terminal services even care?

I'm pretty green to terminal server so I appreciate any
feedback.

Thanks
Maf

What you want to do is possible, but not recommended.
How many users do you want to run in TS and do they all use the same
applications?

Jetro CockpIT
Fulfilling the promise of Server-based Computing
http://www.jp-inc.com


"maf" wrote:

> I've got a 2k term server in application mode. My customer
> wants to lock it down so that users can only run a few
> chosen applications. Right now this is just a stand alone
> server. I want to use group policies to lock down users. Is
> there a better way to do this? What are some of the
> pitfalls of running a DC, license server, and TS all on the
> same box? Do the terminal services even care?
>
> I'm pretty green to terminal server so I appreciate any
> feedback.
>
> Thanks
> Maf
>
>

As mentioned, you could technically do everything on one box and in a small
implementation like this, you could do so without really seeing the adverse
performance. However, from a security standpoint, I would criticize you for
doing so. Ideally, you would have AD with policies running on one server,
and TS on another server.

G

"Jetro CockpIT" wrote:

> What you want to do is possible, but not recommended.
> How many users do you want to run in TS and do they all use the same
> applications?
>
> Jetro CockpIT
> Fulfilling the promise of Server-based Computing
> http://www.jp-inc.com
>
>
> "maf" wrote:
>
> > I've got a 2k term server in application mode. My customer
> > wants to lock it down so that users can only run a few
> > chosen applications. Right now this is just a stand alone
> > server. I want to use group policies to lock down users. Is
> > there a better way to do this? What are some of the
> > pitfalls of running a DC, license server, and TS all on the
> > same box? Do the terminal services even care?
> >
> > I'm pretty green to terminal server so I appreciate any
> > feedback.
> >
> > Thanks
> > Maf
> >
> >