Possible Duplicate:
Allow only RemoteApp, not Remote Desktop

We've setup an application to run remotely under RemoteApp on Windows Server 2008. To do so we had to open up the standard RDP port. Unfortunately that also means that someone with the appropriate knowledge and credentials can now also access the server's desktop remotely. Is there anyway to allow access to a RemoteApp without also allowing access to the desktop.

link|improve this question
feedback

closed as exact duplicate by Miles Erickson, Scott Pack, mailq, sysadmin1138 Dec 2 '11 at 2:28

This question covers exactly the same ground as earlier questions on this topic; its answers may be merged with another identical question. See the FAQ for guidance on how to improve it.

1 Answer

You can restrict remote desktop to a specific group, and limit them to a specific application.

link|improve this answer
That's a somewhat vague answer. Can you include the steps necessary? – George Stocker Oct 8 '10 at 15:24
To limit who can connect via remote desktop use the "Remote Desktop Users" group. To specify what remote users will run use Terminal Services Configuration, right click on the connection for properties and use the Environment tab. – Richard Oct 8 '10 at 15:32
feedback

Not the answer you're looking for? Browse other questions tagged or ask your own question.