Allow only specific computers to access via Web TSAC

[Arch Willingham]

Is there a way to only allow certain machines to log in via the Web terminal
server client?

Thanks,

Arch

 

[Rob Leitman \(MS\)]

You can restrict by IP address with a firewall, or by user at the Terminal
Server.

Rob

 

[Arch Willingham]

I am trying to prevent our home users from logging in via a WIN95/98/ME
computer (which eats a license). If I could figure out a way it to only
WIN2000 or WIN XP machines that would work too. Because some of the home
users come in via cable (with the ip address changing) I am not sure that
would work.

Arch

 

[Vera Noest [MVP]]

You can check the OS version in your login script and throw them
out (use the environment variable %OS% ).

Note: this is a bit clumsy, since it will throw them out *after*
they have received a client license. However, they should give up
after a couple of tries, especially if you display a message
telling them that they will not be able to connect how often they
try. Since their TS CALs then will expire after 52-89 days of not
being used, the TS CALs will be returned to the LS automagically
(provided that you run at least SP3 on the servers).

 

[Arch Willingham]

Dang good idea!!

Arch

You can check the OS version in your login script and throw them
out (use the environment variable %OS% ).

Note: this is a bit clumsy, since it will throw them out *after*
they have received a client license. However, they should give up
after a couple of tries, especially if you display a message
telling them that they will not be able to connect how often they
try. Since their TS CALs then will expire after 52-89 days of not
being used, the TS CALs will be returned to the LS automagically
(provided that you run at least SP3 on the servers).

--
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
http://hem.fyristorg.com/vera/IT
--- please respond in newsgroup ---

 

[Matthew Harris [MVP]]

You could always use the TSVer.exe (which came with the
Windows 2000 Resource Kit). You could only allow certain
builds of the terminal services client to connect, and you
could give those specific builds to only those people you
allow to connect.

This is pretty hokey...but it might work.

-M