comments inline
hi i have citrix setup on windows 2000, i have publshed
applications on citrix for my users and i have install terminal
service( application mode).
In the reverse order, I hope! (TS first, then Citrix)
users can get only applications
screen.i dont want to allow them to logon to
the desktop screen.
or
is there any way to restrict or hide programs from start menu ?
Yes. You can use a Group Policy to redirect the Start menu, Desktop
and other folders to custom folders which you control.
User Configuration - Windows Settings - Folder Redirection
Application Data
Desktop
My Documents
Start Menu
You can also move or delete the contents of the "All Users" part of
the Start Menu.
or
is there any way to restrict or hide start menu ?
Same as above
or
is there any way to restrict logon to the desktop through
terminal services ?
I'm not 100% usre what you mean. You cannot publish applications
with native Windows TS, as you can with Citrix. You can define a
Starting Application, but if you have multiple applications, that's
no option.
But you can, and should, restrict what users can do on the desktop.
Whether you use Citrix or not, and use published applications or
not, make sure that you secure your server with both restrictive
Group Policies and NTFS permissions on the file system. Publishing
applications is *not* a security measure. It is quite easy to get
to the full desktop of the server from within nearly every
application.
_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting:
http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___
