Terminal Server Application - Administration

[Eric Martin]

Hello,

We are trying to set up a terminal server that uses the
RDP environment setting to run a specific application.
When a user logs on, the application is run and when they
close it, the RDP session is logged out. This is exactly
what we want but when an administrator logs on, the same
thing happens. We want the administrators to ge the
regular desktop and not run the app. Does any one know if
there is a way to restrict the envronment(application) to
certian user groups? I don't want to use the client
environment setting because the users can change it. I
want the servr to force the application to run for
everyone except the administrators.

Thanks very much

Eric

 

[Vera Noest [MVP]]

I haven't tried this myself, but it might work:

create a Group Policy that contains this setting, in
Computer Configuration - Administrative templates - Windows
Components - Terminal Services - Starting Application.

Link this GPO to your TS OU (apply loopback processing of the GPO
with the Replace option) AND make sure that Administrators have
"Deny" for the right to "Apply" this policy" on the security tab
of the GPO.

260370 - How to Apply Group Policy Objects to Terminal Services
Servers
http://support.microsoft.com/?kbid=260370

231287 - Loopback Processing of Group Policy
http://support.microsoft.com/?kbid=231287

315675 - HOW TO: Keep Domain Group Policies from Applying to
Administrator Accounts and Selected Users in Windows 2000
http://support.microsoft.com/?kbid=315675

 

[Guest]

Thanks for the quick response. I agree that should work
but I have another problem. I don't have Terminal Services
listed under windows components in my group policy. The
domain controller with the group policy is W2K SP3. The
terminal server is a Windows 2003 member server.

Eric

 

[Vera Noest [MVP]]

Have you tried to add the Terminal Services Snap-in to your mmc?