Lock down RDS desktop.

-

hi,

have setup new windows 2012 rds environment , published-desktop group of users. 

if want create gpo restrict users accessing critical system shortcuts such control panel, cmd, powershell, , lock down securities regular users, suggest link it?  

our ad running on windows server 2008.  

many thanks. 

hi edkc,

there set of group policy settings have configure lock down rd session host server.

refer list below :

*   restricting device , resource redirection

restricting device , resource redirection can configured using following group policy parameter:

-      computer configuration | policies | administrative templates | windows

-components | remote desktop services | session host remote desktop | redirection of device , resource

*   restricting printers redirection

restricting printers redirection can configured using following group policy parameter:

- computer configuration | policies | administrative templates | windows

components | remote desktop services | session host remote desktop | printer

redirection

*   restricting access control panel

restricting access control panel can configured using following group policy parameter:

- user configuration | policies | administrative templates | control panel

  • parameter: deny access control panel , pc settings

*   restricting printer drivers installation

restricting printer drivers installation can configured using following group policy parameter:

-      computer configuration | policies | windows settings | security settings |

-local policies | security options

  • parameter : devices: prevent users installing printer drivers

*   restricting access registry

restricting access registry can configured using following group policy parameter:

- user configuration | policies | administrative templates | system

  • parameter : prevent access registry editing tools

*   restricting  access windows automatic updates 

restricting access windows updates can configured using following group policy parameter:

-      user configuration | policies | administrative templates | system

  • parameter : windows automatic updates

*   restricting access start menu , network options

restriction access start menu , network options can configured using following group policy parameter:

-      user configuration | policies | administrative templates | started menu ,

-taskbar

  • parameter: disable settings match needs!

*   hide desktop icons

desktop icons can hidden using following group policy parameters:

-      user configuration | policies | administrative templates | desktop

  • parameters:
    • hide , disable items on desktop
    • delete "my computer" desktop

*   restricting access cd , floppy drive

restricting access cd , floppy can configured using following group policy parameters:

-      computer configuration | policies | windows settings | security settings | local policies | security options

  • parameters:
    • devices: allow access cd-rom users locally logged on
    • devices: allow floppy drive access local logged on user

*   restricting access command prompt

restricting access command prompt (cmd.exe) can configured using following group policy parameter:

-      user configuration | policies | administrative templates | system

  • parameter : disable access command prompt

*   restricting access task manager

restricting access task manager can configured using following group policy parameter:

-      user configuration | policies | administrative templates | system | ctrl + alt + del options

-      parameter:

  • remove task manager

prevent users running unwanted applications

the goal prevent remote users running applications have not granted access.

preventing remote user running unwanted apps can configured using following group policy parameters:

-      user configuration | policies | administrative templates | system

  • parameters :
    • do not run specified windows applications
    • run specified windows applications

this extract of rds pocket consultant book

goodluck

hk.

hicham kadiri | guy
livre de référence rds 2012 r2 désormais disponible !
rds 2012 r2 reference book available !
découvrez tous mes ebooks )



Windows Server  >  Remote Desktop Services (Terminal Services)



Comments

Post a Comment

Popular posts from this blog

CRL Revocation always failed

-
hi all, i try configure radius server nps, somehow certificate authentication client failed with reason: reason = revocation function unable check revocation because revocation server offline. then check certificate client, certutil -f -urlfetch -verify client7.cer, result follow: issuer:     cn=entca     dc=intra     dc=domain     dc=co     dc=sg subject:     cn=computer.intra.domain.co.sg cert serial number: 1c5b00de000000000041 dwflags = ca_verify_flags_allow_untrusted_root (0x1) dwflags = ca_verify_flags_ignore_offline (0x2) dwflags = ca_verify_flags_full_chain_revocation (0x8) dwflags = ca_verify_flags_console_trace (0x20000000) dwflags = ca_verify_flags_dump_chain (0x40000000) chainflags = cert_chain_revocation_check_chain (0x20000000) hcce_local_machine cert_chain_policy_base -------- cert_chain_context -------- chaincontext.dwinfostatus = ce...
Read more

Failed to query the results of bpa xpath

-
Image
i have new server installed hyper v, iis , domain services roles on it.  i checking event log , see warning multiple times, idea how rid of it?? failed query results of bpa xpath: microsoft/windows/fileservices:$reports$\*\result.xml:/resultdatabase/result. error: device attached system not functioning., last error: system cannot find path specified.. follow me on twitter <<< levalencia blog <<< hi, similar issue discussed in forum: to rid of warnings: 1. go dashboard 2. click on add roles , features 3. click next "before begin step" 4. select "role based or feature based installation" , click next 5. select given server server pool , click next 6. in server roles step make sure following checked:   file , storage services > file , iscsi services > file server, click next 7.click next through rest of steps , install server role 8. rerun bpa scan described earlier for more information please refer foll...
Read more

0x300000d errors in Microsoft Remote Desktop client

-
we use rd connect home users office. @ server side remote desktop gateway configured on 2008r2 server. experience following:   for years worked fine, starting last year users apple macbook experienced connection errors after new version of microsoft remote desktop in app store , automatic update. after couple of weeks error disappaered when new updates released. since 6 8 weeks problem again. because don’t have macbook cannot reproduce problem.   starting couple of weeks samsung s6 experiencing problems, here version 8.1.37.135 installed, error displayed is: can’t connect tot remote pc because remote desktop gateway server temporaraily unavailable. try connecting later or contact network administrator assistance. error code  0x300000d   because has worked fine years expect issues on client can configuration error on gateway server.   who pin point real cause?   however, testing other rd gateway server works ok settings identically....
Read more