Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I need to allow a user to RDP to a Win 2003 server (not currently a TS) and lock that user down to just have access to one folder and to run the app in that one folder. I feel like there is a few different ways of going about this but would like to get some guidance on the "best". The app doesn't work via a network share so it seems the only option is for the user to RDP to the server.

share|improve this question
up vote 3 down vote accepted
  1. Use software restriction policies to restrict this user's rights to execute software. The user should be able to run only the single app that you want to authorize.

  2. Configure NTFS permissions so that the user is permitted access only to files in the intended folder.

share|improve this answer
forgot about the software restriction policy, I'll give that a shot and lock everything else down. – evolvd May 2 '12 at 18:46
Also you can GPO the entire GUI to only display a shortcut to the folder or application. Remove My Computer and access to browsing explorer. – AdminAlive May 2 '12 at 19:58

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.