Configuring Windows 2000 User Environment to Limit Program Availability in Terminal Server (285977)


The information in this article applies to:

  • Microsoft Windows 2000 Server
  • Microsoft Windows 2000 Advanced Server
  • Microsoft Windows 2000 Datacenter Server
This article was previously published under Q285977

SUMMARY

This article describes how to configure user environments in Microsoft Windows 2000 so that, on a server running Microsoft Windows NT 4.0, Terminal Server Edition, only certain programs are available to specific users.

MORE INFORMATION

When programs are hosted on a computer running Terminal Server, group policies cannot be used to deploy them selectively.

The only way to configure a controlled environment that limits access to certain programs on a computer running Terminal Server is to use mandatory profiles to assign programs, and then enable group policy to lock down the Windows desktop and to prevent programs in the All Users profile from loading.

  1. Create several mandatory profiles to control program access. In each mandatory profile, customize the programs in the Start menu as appropriate.
  2. Edit the group policy to remove the programs from the All Users profile. To do this, enable Remove common program groups from Start menu under User Configuration/Administrative Templates/Start Menu and Taskbar in the Group Policy snap-in.
  3. Edit the group policy to configure the desktop environment policies as appropriate.
  4. Assign each user account the appropriate mandatory profile.
Modification Type:MajorLast Reviewed:11/19/2003
Keywords:kbinfo KB285977
©2003 Microsoft Corporation. All rights reserved.