OT: How to lock down Terminal Server for Vantage Users? Window

Yahoo Archive
1
We are using T/S and have a "remote" group set up where only the
application icons on the desktop
can be accessed. The group policy for these users is set in the user
configuration in the start menu and taskbar
settings. You can select as much or as little as you want. Our users
can run the desktop applications for their
profile or log off of terminal server. We also have some mapped drives
for specified users.
Actually, you will find that it is pretty easy to set this up. Our
biggest problem is printing from
T/S.
Best luck,
2
We are upgrading to 6.1 and plan on using Terminal Server to run Vantage
(historically we have run the Vantage software on a server and users
connected through a local client install).

We will use the same server for the Vantage db and the terminal services
(we like the speed benefits from a single server)

We need to lock down the Terminal Server for users who log on to run
Vantage (ex: we want to lock down start menu, access to windows
explorer...etc.). Basically, we want to give users the ability to only
run Vantage and nothing else. We are doing this through group policy
(Windows Server 2003 AD) and it works fine. However, it locks down
EVERY user, including administrative users. Ideally, we'd like to have
3 separate groups - Admins with full access, Vantage Power users with
access to Practice Company and report builders and a Vantage user group
with access to Vantage only.

We are experimenting with WMI queries to limit the scope of the GPO.
Does anyone have any experience with this? Are we going down the right
path? If so, how would I right a query to apply to a single computer
and multiple users in a computer group?

Any help would be greatly appreciated...

TIA,

Kelly Wendorff
Cost Accounting
Steel Craft Corp
Hartford, WI
3
Hi Kelly

I might be missing the point, but can't you create different
organisational units in users and apply different group policies to each
unit

Gary

_____

From: Kelly Wendorff [mailto:kelly.wendorff@...]
Sent: 29 November 2004 14:47
To: vantage@yahoogroups.com
Subject: [Vantage] OT: How to lock down Terminal Server for Vantage
Users? Windows 2003 Active Directory



We are upgrading to 6.1 and plan on using Terminal Server to run Vantage
(historically we have run the Vantage software on a server and users
connected through a local client install).

We will use the same server for the Vantage db and the terminal services
(we like the speed benefits from a single server)

We need to lock down the Terminal Server for users who log on to run
Vantage (ex: we want to lock down start menu, access to windows
explorer...etc.). Basically, we want to give users the ability to only
run Vantage and nothing else. We are doing this through group policy
(Windows Server 2003 AD) and it works fine. However, it locks down
EVERY user, including administrative users. Ideally, we'd like to have
3 separate groups - Admins with full access, Vantage Power users with
access to Practice Company and report builders and a Vantage user group
with access to Vantage only.

We are experimenting with WMI queries to limit the scope of the GPO.
Does anyone have any experience with this? Are we going down the right
path? If so, how would I right a query to apply to a single computer
and multiple users in a computer group?

Any help would be greatly appreciated...

TIA,

Kelly Wendorff
Cost Accounting
Steel Craft Corp
Hartford, WI






Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
have already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder
and Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
(2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
(3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links



Yahoo! Groups Sponsor
ADVERTISEMENT
click here
<http://us.ard.yahoo.com/SIG=1294ukc7f/M=298184.5639630.6699735.3001176/
D=groups/S=1705007183:HM/EXP=1101825988/A=2434970/R=0/SIG=11edksnhv/*htt
p://www.netflix.com/Default?mqso=60185402>

<http://us.adserver.yahoo.com/l?M=298184.5639630.6699735.3001176/D=group
s/S=:HM/A=2434970/rand=787567386>

_____

Yahoo! Groups Links


* To visit your group on the web, go to:
http://groups.yahoo.com/group/vantage/

* To unsubscribe from this group, send an email to:
vantage-unsubscribe@yahoogroups.com
<mailto:vantage-unsubscribe@yahoogroups.com?subject=Unsubscribe>

* Your use of Yahoo! Groups is subject to the Yahoo! Terms of
Service <http://docs.yahoo.com/info/terms/> .




[Non-text portions of this message have been removed]
4
I do that now but use Citrix. I create an application and put an icon on
the users desktop, they click on the icon just as they do when they
connect directly to Vantage.

Nick

-----Original Message-----
From: Kelly Wendorff [mailto:kelly.wendorff@...]
Sent: Monday, November 29, 2004 8:47 AM
To: vantage@yahoogroups.com
Subject: [Vantage] OT: How to lock down Terminal Server for Vantage
Users? Windows 2003 Active Directory



We are upgrading to 6.1 and plan on using Terminal Server to run Vantage
(historically we have run the Vantage software on a server and users
connected through a local client install).

We will use the same server for the Vantage db and the terminal services
(we like the speed benefits from a single server)

We need to lock down the Terminal Server for users who log on to run
Vantage (ex: we want to lock down start menu, access to windows
explorer...etc.). Basically, we want to give users the ability to only
run Vantage and nothing else. We are doing this through group policy
(Windows Server 2003 AD) and it works fine. However, it locks down
EVERY user, including administrative users. Ideally, we'd like to have
3 separate groups - Admins with full access, Vantage Power users with
access to Practice Company and report builders and a Vantage user group
with access to Vantage only.

We are experimenting with WMI queries to limit the scope of the GPO.
Does anyone have any experience with this? Are we going down the right
path? If so, how would I right a query to apply to a single computer
and multiple users in a computer group?

Any help would be greatly appreciated...

TIA,

Kelly Wendorff
Cost Accounting
Steel Craft Corp
Hartford, WI







Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
have already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder
and Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
(2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
(3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links
Yahoo! Groups Links