[THIN] Re: Lock some functions on some servers (Sent bythin-bounce@freelists.org on behalf of "Graeme Frost"<Graeme.Frost@computerland.co.nz> )
- From: "Dirk Blose" <Dirk.Blose@xxxxxxxxxx>
- To: thin@xxxxxxxxxxxxx
- Date: Wed, 06 Aug 2003 10:07:40 -0400
You need to setup a policy or GPO to deny Task Manager to the users to block
this.
Dirk Blose, MCSE, CCA
Lead Technical Analyst
(919) 765-4791
dirk.blose@xxxxxxxxxx
>>> Brian.Lilley@xxxxxxxxxxxxx 08/06/03 10:04AM >>>
I agree.... and while were on the subject, check this out on your Citrix
servers.... when running a published app, press CTRL+f3 and see if you get
task mangler, from which you can run cmd.exe and control panel et al...!!
-----Original Message-----
From: fabrice.coppens@xxxxxxxxxxx [mailto:fabrice.coppens@xxxxxxxxxxx]
Sent: 06 August 2003 14:15
To: thin@xxxxxxxxxxxxx; thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Lock some functions on some servers (Sent by
thin-bounce@xxxxxxxxxxxxx on behalf of "Graeme Frost"
<Graeme.Frost@xxxxxxxxxxxxxxxxxx> )
That's what i think to.... :-)
-----Original Message-----
From: "Graeme Frost" <Graeme.Frost@xxxxxxxxxxxxxxxxxx>
Sent: mercredi 6 août 2003 15:08
To: <thin@xxxxxxxxxxxxx>
Cc:
Subject: [THIN] Re: Lock some functions on some servers (Sent by
thin-bounce@xxxxxxxxxxxxx on behalf of "Graeme Frost"
<Graeme.Frost@xxxxxxxxxxxxxxxxxx> )
What you can do is setup an OU Organizational Unit for the terminal
servers and create a group policy for the Terminal Server OU. This is
where you can lock down terminal server users. I definately would not be
allowing any terminal server users access to the add/remove programs
console. Follow this link
http://support.microsoft.com/default.aspx?scid=http://support.microsoft.com:
80/support/kb/articles/Q278/2/95.ASP&NoWebContent=1
Good luck
Graeme
-----Original Message-----
From: Avishay Harary [mailto:avishayh@xxxxxxxxxx]
Sent: Wed 6/08/2003 21:07
To: thin@xxxxxxxxxxxxx
Cc:
Subject: [THIN] Lock some functions on some serversHi you all,
I have few Terminal servers in my organization. Some users connect to
them throw thin clients and some throw their laptops or desktops with
ICA or RDP protocol.
I want to prevent all users from performing some functions on the
terminal servers when they open a session, and to be able to perform
those actions when they are working on their own computers. for
example: to enter add / remove programs. I want to disable this on the
Terminal Server and to allow the desktop users to enter it on their
computers. to add a printer, to install application from the Internet
(there are some applications that do not need to go through the add
remove programs even on terminal server) and so on.
Please, any suggestions?thanks,
Avishay
---
CAUTION: This e-mail message and accompanying data may contain
information that is confidential and subject to privilege. If you are
not the intended recipient, you are notified that any use,
dissemination, distribution or copying of this message or data is
prohibited. If you have received this e-mail in error, please notify me
immediately and delete all material pertaining to this e-mail. We will
not accept liability for any loss or damage caused by using any
material or attachments contained in this message. While every best
practice has been taken, no warranty is made that this material is free
from computer virus or other defect. Our entire liability will be
limited to resupplying the material. Thank you
- winmail.dat << File: winmail.dat >>
********************************************************
This weeks sponsor - RTOSoft TScale
Complaints about applications response time - DO SOMETHING ABOUT IT!
TScale 2.0 improves applications response time and increases terminal
server capacity. Really get MORE from your existing servers! Free eval:
http://www.rtosoft.com/enter.asp?id=130
**********************************************************
Useful Thin Client Computing Links are available at:
http://thethin.net/links.cfm
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm
***********************************************************************************
EDF Energy plc internet e-mail disclaimer
This e-mail and any files transmitted with it are confidential and may be
protected by legal privilege. If you are not the intended recipient, please
notify the sender and delete the e-mail from your system. This e-mail has been
scanned for malicious content but the internet is inherently insecure and EDF
Energy plc cannot accept any liability for the integrity of this message or its
attachments. No employee or agent of EDF Energy plc or any related company is
authorised to conclude any binding agreement on behalf of EDF Energy plc or any
related company by e-mail. All e-mails sent and received by EDF Energy plc are
monitored to ensure compliance with the company's information security policy.
***********************************************************************************
********************************************************
This weeks sponsor - RTOSoft TScale
Complaints about applications response time - DO SOMETHING ABOUT IT!
TScale 2.0 improves applications response time and increases terminal
server capacity. Really get MORE from your existing servers! Free eval:
http://www.rtosoft.com/enter.asp?id=130
**********************************************************
Useful Thin Client Computing Links are available at:
http://thethin.net/links.cfm
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm
********************************************************
This weeks sponsor - RTOSoft TScale
Complaints about applications response time - DO SOMETHING ABOUT IT!
TScale 2.0 improves applications response time and increases terminal
server capacity. Really get MORE from your existing servers! Free eval:
http://www.rtosoft.com/enter.asp?id=130
**********************************************************
Useful Thin Client Computing Links are available at:
http://thethin.net/links.cfm
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm
Other related posts:
