Windows 2008 Terminal Services Seamless client & Lock Down

[benIT]

Now got a working Windows 2008 Server Running Terminal Services.

 

I have setup to only allow programs they an RDP File for. This way it stops them seeing any desktop - just displays the application - From the end users view it looks like a local applicaton - Wow!

 

Not sure if anyone else has played with locking down the server, but I can not get rid of the "Network" option when opening and saving. This is a big problem as they could potentially browse the whole network!!!

 

Image attached to explain further.

 

I have tried Loop back policy and students do not have access to network drive under normal machines!! I am lost !!!

[k-strider]

I'm just starting to play with this too, so i have a thought have you tried editing the looped back meged policy form a vista / 2K8 machien as it may be some new setting that isn't in the old ADM templates? just a thought i've not got quite as far as the lockdown yet still playing with Remote desktop and Remote Apps via the Web access which is very kewl, though the req of vista sp1 or XP SP3 is a bit of a pain!

[CyberNerd]

though the req of vista sp1 or XP SP3 is a bit of a pain!

 

Indeed, one of the reasons cited for terminal servers is to lower hardware TCO and to run on low maintenance diskless boxes. 2008TS does neither. Published applications can be also achieved with citrix or traditional remote x sessions (*nix).

[linescanner]

We have just started playing with this and my guys are working on lock down now. Seems to be going ok.

 

As for the publishing of apps......what a pain on the requirements.

 

We use sgd for this which is platform agnostic.

[GrumbleDook]

@linescanner

 

Do you have a timescale for rolling out boxes with Server 2008 on?

[linescanner]

Not as yet, that is a question I will ask Rick tomorrow.

 

I will let you know soonest