lockdown suggestions

[maf]

I've got a 2k term server in application mode. My customer
wants to lock it down so that users can only run a few
chosen applications. Right now this is just a stand alone
server. I want to use group policies to lock down users. Is
there a better way to do this? What are some of the
pitfalls of running a DC, license server, and TS all on the
same box? Do the terminal services even care?

I'm pretty green to terminal server so I appreciate any
feedback.

Thanks
Maf

 

[Guest]

What you want to do is possible, but not recommended.
How many users do you want to run in TS and do they all use the same
applications?

Jetro CockpIT
Fulfilling the promise of Server-based Computing
http://www.jp-inc.com

 

[Guest]

As mentioned, you could technically do everything on one box and in a small
implementation like this, you could do so without really seeing the adverse
performance. However, from a security standpoint, I would criticize you for
doing so. Ideally, you would have AD with policies running on one server,
and TS on another server.

G