Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I need to allow a user to RDP to a Win 2003 server (not currently a TS) and lock that user down to just have access to one folder and to run the app in that one folder. I feel like there is a few different ways of going about this but would like to get some guidance on the "best". The app doesn't work via a network share so it seems the only option is for the user to RDP to the server.

share|improve this question

1 Answer 1

up vote 3 down vote accepted
  1. Use software restriction policies to restrict this user's rights to execute software. The user should be able to run only the single app that you want to authorize.

  2. Configure NTFS permissions so that the user is permitted access only to files in the intended folder.

share|improve this answer
    
forgot about the software restriction policy, I'll give that a shot and lock everything else down. –  evolvd May 2 '12 at 18:46
1  
Also you can GPO the entire GUI to only display a shortcut to the folder or application. Remove My Computer and access to browsing explorer. –  AdminAlive May 2 '12 at 19:58

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.