Windows Server TechCenter > Windows Server Forums > Terminal Services > TS 2008 Remote Apps - How to limit where a user can save things
Ask a questionAsk a question
 

AnswerTS 2008 Remote Apps - How to limit where a user can save things

  • Tuesday, November 03, 2009 9:18 PMbeatdown Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    We're rolling out TS 2008, so users can access our ERP application using the RemoteApp feature. When a user goes to save an item from the RemoteApp, by default, it saves to the "C:\users\%username%\documents" folder. They can browse to another file location to save, if they want to.

    The problem is that we don't want our users saving to the "documents" folder on the terminal server...we want them to save to their user home shares. We don't want them to be able to save anything on the terminal server at all.

    Is there a way to set it up, so they save to their home share, or some mapped drive/folder, by default? Or is there a way to deny them the ability to save to their own profile on the terminal server?

    Basically, our users aren't smart enough to pay attention to where they are saving things, so we need to figure out a way for them to only be able to save to one place, that the IT dept specifies.

    There must be a way to set something like this up... Anyone have any ideas?

    Thanks!

Answers

  • Wednesday, November 04, 2009 4:26 AMVikash BuchaMSFT, ModeratorUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer
    You can hide the local drives on your TS machine to achieve this. Please refer to this post to know more about it http://social.technet.microsoft.com/Forums/en-US/winserverTS/thread/ef03aa4e-a0fe-4092-ac30-fd1283f74465


    Thanks, Vikash
  • Wednesday, November 04, 2009 4:35 AMTP [] Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer
    Hi,

    Normally you would use a combination of Folder Redirection, group policy settings (hide drives like Vikash mentioned and others), and application-specific settings to achieve what you want.  For example, many applications default to saving files in the user's Documents folder.  If you redirect documents to their home share, then the user will save things to your server.   There are other key folders to redirect as well like Desktop/Application Data.

    Finally you need to consider the specific applications in your environment.  Some applications default to saving their data in a location other than Documents, and/or they may ignore the group policy hide drives setting.  This is why you need to examine each application in order to see if you need to create a script or similar in order to control its save location.

    Thanks.

    -TP

All Replies

  • Wednesday, November 04, 2009 4:26 AMVikash BuchaMSFT, ModeratorUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer
    You can hide the local drives on your TS machine to achieve this. Please refer to this post to know more about it http://social.technet.microsoft.com/Forums/en-US/winserverTS/thread/ef03aa4e-a0fe-4092-ac30-fd1283f74465


    Thanks, Vikash
  • Wednesday, November 04, 2009 4:35 AMTP [] Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer
    Hi,

    Normally you would use a combination of Folder Redirection, group policy settings (hide drives like Vikash mentioned and others), and application-specific settings to achieve what you want.  For example, many applications default to saving files in the user's Documents folder.  If you redirect documents to their home share, then the user will save things to your server.   There are other key folders to redirect as well like Desktop/Application Data.

    Finally you need to consider the specific applications in your environment.  Some applications default to saving their data in a location other than Documents, and/or they may ignore the group policy hide drives setting.  This is why you need to examine each application in order to see if you need to create a script or similar in order to control its save location.

    Thanks.

    -TP