Lock down TS 2008 in sbs 2003 environment
|
From: Thomas Kroljic on 17 Jun 2010 20:27 All, (Sorry for the cross post. I think I initially posted this in the wrong forum) Yesterday I added a new Windows 2008 R2 Terminal Server to our existing SBS 2003 R2 environment. My question is this: I want to "lock down" this new server, so do I create a Group Policy on the SBS box or on the new 2008 TS box? Thank you, Thomas
From: Charlie Russel - MVP on 18 Jun 2010 10:24 What do you mean by "lock down"? That's the sort of requirement that can have many, many meanings. Give us more details on what you're trying to accomplish and we'll likely be able to help. -- Charlie. http://msmvps.com/blogs/russel "Thomas Kroljic" <tkroljic(a)covad.net> wrote in message news:%23I3dB0nDLHA.4308(a)TK2MSFTNGP04.phx.gbl... > All, (Sorry for the cross post. I think I initially posted this in the > wrong forum) > > Yesterday I added a new Windows 2008 R2 Terminal Server to our existing > SBS 2003 R2 environment. My question is this: I want to "lock down" this > new > server, so do I create a Group Policy on the SBS box or on the new 2008 TS > box? > > Thank you, > Thomas > >
From: Thomas Kroljic on 18 Jun 2010 22:42 I have a number of users who Remote Desktop in to this terminal server. I would like to use Group Policy to do a number of things such as: - remove Control Panel from the Start Menu - remove Administrative Programs - Access to Network Cards (nics) - remove the Run command - remove the Command prompt... - remove the Explorer program so they can not view the file (folder) structure - basically remove all items from the Start menu that they don't need access to. I would like to use Group Policy to control what the users have access to. I have place these users into a group so I was hoping that I could create a group policy and then add the group to the GP. Thank, Thomas "Charlie Russel - MVP" <Charlie(a)mvKILLALLSPAMMERSps.org> wrote in message news:D41688C8-644F-4E99-8362-916672205445(a)microsoft.com... > What do you mean by "lock down"? That's the sort of requirement that can > have many, many meanings. Give us more details on what you're trying to > accomplish and we'll likely be able to help. > > -- > Charlie. > http://msmvps.com/blogs/russel > > > > > "Thomas Kroljic" <tkroljic(a)covad.net> wrote in message > news:%23I3dB0nDLHA.4308(a)TK2MSFTNGP04.phx.gbl... >> All, (Sorry for the cross post. I think I initially posted this in the >> wrong forum) >> >> Yesterday I added a new Windows 2008 R2 Terminal Server to our existing >> SBS 2003 R2 environment. My question is this: I want to "lock down" this >> new >> server, so do I create a Group Policy on the SBS box or on the new 2008 >> TS >> box? >> >> Thank you, >> Thomas >> >> >
From: Charlie Russel - MVP on 19 Jun 2010 01:21 I think most of those things are handled by local policies, though it's probably possible to do it for the domain. But since it's a single TS, I'd be inclined to just do it there. -- Charlie. http://msmvps.com/blogs/russel "Thomas Kroljic" <tkroljic(a)covad.net> wrote in message news:u35KDk1DLHA.4816(a)TK2MSFTNGP04.phx.gbl... >I have a number of users who Remote Desktop in to this terminal server. I >would like to use Group Policy to do a number of things such as: > - remove Control Panel from the Start Menu > - remove Administrative Programs > - Access to Network Cards (nics) > - remove the Run command > - remove the Command prompt... > - remove the Explorer program so they can not view the file (folder) > structure > - basically remove all items from the Start menu that they don't need > access to. > > I would like to use Group Policy to control what the users have access > to. I have place these users into a group so I was hoping that I could > create a group policy and then add the group to the GP. > > Thank, > Thomas > > "Charlie Russel - MVP" <Charlie(a)mvKILLALLSPAMMERSps.org> wrote in message > news:D41688C8-644F-4E99-8362-916672205445(a)microsoft.com... >> What do you mean by "lock down"? That's the sort of requirement that can >> have many, many meanings. Give us more details on what you're trying to >> accomplish and we'll likely be able to help. >> >> -- >> Charlie. >> http://msmvps.com/blogs/russel >> >> >> >> >> "Thomas Kroljic" <tkroljic(a)covad.net> wrote in message >> news:%23I3dB0nDLHA.4308(a)TK2MSFTNGP04.phx.gbl... >>> All, (Sorry for the cross post. I think I initially posted this in the >>> wrong forum) >>> >>> Yesterday I added a new Windows 2008 R2 Terminal Server to our >>> existing >>> SBS 2003 R2 environment. My question is this: I want to "lock down" this >>> new >>> server, so do I create a Group Policy on the SBS box or on the new 2008 >>> TS >>> box? >>> >>> Thank you, >>> Thomas >>> >>> >> > >
From: Thomas Kroljic on 19 Jun 2010 22:52 Charlie, thanks for the advice. I decided to create a Group Policy on the new server (2008) and then add the users I want the Group Policy to apply to. Thank you, thomas "Charlie Russel - MVP" <Charlie(a)mvKILLALLSPAMMERSps.org> wrote in message news:70E77E82-D2C8-4EAE-9728-F63739E4E5E3(a)microsoft.com... >I think most of those things are handled by local policies, though it's >probably possible to do it for the domain. But since it's a single TS, I'd >be inclined to just do it there. > > -- > Charlie. > http://msmvps.com/blogs/russel > > > > > "Thomas Kroljic" <tkroljic(a)covad.net> wrote in message > news:u35KDk1DLHA.4816(a)TK2MSFTNGP04.phx.gbl... >>I have a number of users who Remote Desktop in to this terminal server. I >>would like to use Group Policy to do a number of things such as: >> - remove Control Panel from the Start Menu >> - remove Administrative Programs >> - Access to Network Cards (nics) >> - remove the Run command >> - remove the Command prompt... >> - remove the Explorer program so they can not view the file (folder) >> structure >> - basically remove all items from the Start menu that they don't need >> access to. >> >> I would like to use Group Policy to control what the users have access >> to. I have place these users into a group so I was hoping that I could >> create a group policy and then add the group to the GP. >> >> Thank, >> Thomas >> >> "Charlie Russel - MVP" <Charlie(a)mvKILLALLSPAMMERSps.org> wrote in message >> news:D41688C8-644F-4E99-8362-916672205445(a)microsoft.com... >>> What do you mean by "lock down"? That's the sort of requirement that can >>> have many, many meanings. Give us more details on what you're trying to >>> accomplish and we'll likely be able to help. >>> >>> -- >>> Charlie. >>> http://msmvps.com/blogs/russel >>> >>> >>> >>> >>> "Thomas Kroljic" <tkroljic(a)covad.net> wrote in message >>> news:%23I3dB0nDLHA.4308(a)TK2MSFTNGP04.phx.gbl... >>>> All, (Sorry for the cross post. I think I initially posted this in the >>>> wrong forum) >>>> >>>> Yesterday I added a new Windows 2008 R2 Terminal Server to our >>>> existing >>>> SBS 2003 R2 environment. My question is this: I want to "lock down" >>>> this new >>>> server, so do I create a Group Policy on the SBS box or on the new 2008 >>>> TS >>>> box? >>>> >>>> Thank you, >>>> Thomas >>>> >>>> >>> >> >> >
|
Pages: 1 Prev: Windows Server 2008 Standard Technologies Next: SBS and moving to new hardware |