Restricting Access to the Start Menu

[brendaluv]

Hello,

what would be the most efficient way of restricting access to the some of the programs listed under the Start Menu to during Terminal Service Sessions.

for example, we have the ressource kit installed and we do not wish regular users to access it. We have removed it from the All Users profile, but they can still browse to the C:\ and launch it.

how can we lock this down?

thanks!

 

[GSG9]

If you just want to prevent access to specific apps and whanot the easiest way to do that would be with simple file perms...

in your example only grant user access (read and execute in your case) to that particular .EXE or the folder it resides in to users that you want to be able to run it.

 

[markdmac]

Assign the DENY NTFS rights to your general users. Remember that DENY will override any other settings so be sure that you don't lock out the people you want to have access by assigning to any groups that THEY belong to also.

I hope you find this post helpful. Please let me know if it was.

Regards,

Mark

 

[brendaluv]

general users are logging on using there Domain/Roaming Profile, so what your suggesting is that i go to each folder, add the user to the ACL, then deny or grant access to the program? i dont see mysefl doing this for 200 users...

 

[markdmac]

You would want to handle this in one of two ways. Create a group of the users that should NOT have access and add that group to the NTFS permissions, OR you could remove inherritance, strip away everyone and just add rights to the users that you WANT to have access.

I hope you find this post helpful. Please let me know if it was.

Regards,

Mark