Making RDP more secure

[mattx]

Before I go and dig deep into the murky world of Technet and other related user manuals etc, does anyone know a good way of allowing a user to have access to a server using RDP but NOT giving them full Admin permissions ?
I have a member of staff who wants access to a server to use the E-portal software for our Facility setup.
For some really stupid reason the brain dead twits who wrote Facility have installed a bit of software that controls the E-portal, and that can ONLY be run on the server and NOT on an end client.
I have found this app - 2X SecureRDP http://www.2x.com/securerdp/
But it does not have all the bells and whistles I am after - maybe some setting s on some NTFS permissions may be in order....
Unless someone has a better solution...

[NetworkGeezer]

Is you your server a DC or member server. If the second then check to see if there is Remote Desktop Users group in local user management tool and add them there.

Alternatively you do the following:
[code]net localgroup "Remote Desktop Users" /add teacher_yikes[code]

Why can the program run on the server, if you don't mind me asking?

[mattx]

Thanks for that - I think that has solved my problem.
I just created a user [ from the domain ] on the local server, logged in and the desktop / profile was created. I was then able to fire off the app. On checking the permissions on other apps on the server there was no way [ yet ] I was able to do any damage. [ Like delete etc ]
Thanks again.