TheProf

Hello,

I hope everyone is doing well.

Normally I deal with linux setups, but I'm now working at a company setting up their windows network, which is cool since I need the work.

In a nutshell, I am stuck on how to specify a different mandatory profile and start menu for people who remote desktop into the terminal server than those who are locally connecting to the server.

background: they have a new Windows server 2000 domain controller machine, with Terminal Services set up for applications. They have about 10 people who connect using remote desktop to this server. The rest of the people are in the office logging onto their 200 workstation or XP workstation, authenticating against the server, but working off their own machines.

How do I restrict those users who are logging in remotely? I'd like to be able to set up a custom start menu (I've got the folder layout done) and restrict their access to just the programs they need (IE: no modifying backgrounds, installing/uninstalling, etc.). But i don't want those same restrictions for the local users.

I'm at a loss, so all help is greatly appreciated.

thank you very much.

Anexkahn

in the active directory users and computers snapin, you can specify a different profile to use for terminal services sessions. Its on the Terminal services profile tab of the user's details.

TheProf

Hello,

I checked that out, and it seems, as you mentioned, that is where I would specify the details of where the profile is stored.

However, I do not know how I would create that profile. I tried creating a generic user (TSUSER for example) then logged in as him on the server. I started to put the desktop as I wanted it, but then whenever I tried to modify the start menu, it told me that the changes would affect all users on the server, which I don't want!

As well, there was no way to do things like hide the hard drives, prevent modification of the background, etc.

How would I go about doing those things?

Thank you kindly.