Default Startup Environment Settings
John L Magee
The only way I could find other than specifying the settings by user was to
specify them on the connection settings for the server. Doing this, of
course, precludes the ability to remotely manage the server,
Any suggestions would be appreciated.
Cherry Qian (msft)
Thank you for the posting. To do so, you can use the following methods:
1. By Using Client Connection Manager: Specify the Program to Start When
You Create a New Connection or To Change the Program to Start
2. By Using the Environment Tab
3. By Using a Program Shortcut in the Startup Folder
4. By Using Group Policy
5. By Using the Registry
6. By Using a Logon Script: To Assign a User Logon Script to a User
For more infomation and step-by-step instruction on this, please refer to
this knowledge base article:
HOW TO: Automatically Run Programs When Users Log On to Windows 2000
Terminal Services
http://support.microsoft.com/default.aspx?scid=kb;en-us;321707
Hope the above information and suggestion helps and answers your question.
If anything is unclear, please let me know.
Sincerely,
Cherry Qian
MCSE2000, MCSA2000, MCDBA2000
Microsoft Partner Online Support
Get Secure! - www.microsoft.com/security
====================================================
When responding to posts, please Reply to Group via your newsreader so
that others may learn and benefit from your issue.
====================================================
This posting is provided AS IS with no warranties, and confers no rights.
John L Magee
like to do, however.
It would be most useful if one could specify, for a computer, the default
environment variables, but have that overridden by settings for a givne
domain account.
The specific requirement I have is for all normal users to be forced to use
only one application but still allow administrators to have full access to
the machine through Terminal Services.
At the moment, I only have one TS application but could conceive of having
more soon.
Perhaps, for the near term at least, you could point me to a method of
setting the Environment tab valuse programatically. I cannot find the
properties anywhere Active Directory. I used ADSIEdit to go through all of
the properties for an account with values specified for the Environment Tab
but could not find any properties for them.
Thanks.
jlm
"Cherry Qian (msft)" <che...@online.microsoft.com> wrote in message
news:xXoVif1T...@cpmsftngxa06.phx.gbl...
Vera Noest [MVP]
the TS when a user opens a connection (don't forget to use
loopback processing of this GPO), then you can simply "deny"
administrators the right to "apply this policy". They won't be
affected and get the full desktop.
Does this do what you want?
--
Vera Noest
MCSE, CCEA, MVP - Terminal Server
http://hem.fyristorg.com/vera/IT
--- please answer in newsgroup ---
"John L Magee" <jlm...@mageenet.net> wrote in
news:#Oxx#63TDH...@TK2MSFTNGP10.phx.gbl:
Cherry Qian (msft)
Thank you for the posting again.
As you indicated the specific requirement you have is for all normal users
to be forced to use only one application but still allow administrators to
have full access to the machine through Terminal Services.
To do so you can use a Group Policy to define which application to start on
the TS when a user opens a connection, and then you can simply "deny"
administrators the right to "apply this policy". They won't be affected and
get the full applications.
For more information, please refer to this knowledge base article:
294751 Terminal Services Group Policy Objects
http://support.microsoft.com/?id=294751
John L Magee
Services Folder under .../Administrative Templates/Windows Components
Please help.
jlm
"Cherry Qian (msft)" <che...@online.microsoft.com> wrote in message
news:qGlF%23TCUD...@cpmsftngxa06.phx.gbl...
Charlie Markwick
I am struggling with this problem at the moment and like John Magee I
can's see the terminal server section in any group policy setting.
How in active directory on windows 2000 does one control the user
logon so they only run one application and get logged out when they
close it while at the same time allow domain admins to log in and not
have to run the app?
I can see the logic of the answers but for the life of not see how to
put them into practice.
Charlie Markwick
On Mon, 21 Jul 2003 14:50:26 -0700, "Vera Noest [MVP]"
<vera....@remove-this.hem.utfors.se> wrote:
>If you use a Group Policy to define which application to start on
>the TS when a user opens a connection (don't forget to use
>loopback processing of this GPO), then you can simply "deny"
>administrators the right to "apply this policy". They won't be
>affected and get the full desktop.
>
>Does this do what you want?
>
> --
>Vera Noest
>MCSE, CCEA, MVP - Terminal Server
>http://hem.fyristorg.com/vera/IT
> --- please answer in newsgroup ---
>
snip
Vera Noest [MVP]
start a new mmc - File menu - Add/Remove snapin module - Add -
from the list of available snapins Group Policies? They should be
there, under Administrative templates - Windows components -
Terminal Services.
--
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
http://hem.fyristorg.com/vera/IT
--- please respond in newsgroup, NOT by private email ---
Charlie Markwick <new...@southcot.com> wrote in
news:oceec0l731eptmnf0...@4ax.com:
Charlie Markwick
Charlie
On Wed, 09 Jun 2004 15:56:08 -0700, "Vera Noest [MVP]"
Qi Lu
It is because you have win2k domain if you upgrade to win2k3 domain then you
can see the TS settings.
If you still want to use win2k domain then you can set it up at each user
account on AD.
Qi
"Charlie Markwick" <new...@southcot.com> wrote in message
news:nlffc0ltb84jd17od...@4ax.com...
Charlie Markwick
I guess tha must be what it is, a bit confusing as this thread
predominantly refers to w2k. Many Thanks to you and Vera for feedback.
Charlie