You deploy a Microsoft RemoteApp program on a Remote Desktop Session Host (RD Session Host) server farm. The RD Session Host servers run on Windows Server 2008 R2. When users log in to the RemoteApp…

Question

Options

• ADeploy the Group Policy settings for Folder Redirection to redirect the Application Data,
• BDeploy the Group Policy settings Hide these specified drives in My Computer and Prevent
• CModify the registry on each RD Session Host server to hide Favorites and Libraries from the
• DConfigure the NTFS permissions on the RD Session Host servers to restrict access to the

• A
  4% (1)
• B
  83% (20)
• D
  13% (3)

Explanation

The primary reason to remove Favorites and Libraries and access to drives is because they contain mostly accessed locations on a system, so in the case of the RD Session Host server, this includes the desktop, downloads, recent places, etc. It is recommended that a user not save any documents to these locations. Removing Favorites and Libraries You must perform these modifications on the RD Session Host server. You can use the Registry to make these changes. Using the Registry (applies to all users including the administrators) 1. For Favorites, the key is: [HKEY_CLASSES_ROOT\CLSID{323CA680-C24D-4099-B94D- 446DD2D7249E}\ShellFolder] "Attributes"=dword:a0900100 Changing a0900100 to a9400100 will hide Favorites from the navigation pane. 2. For Libraries, the key is: [HKEY_CLASSES_ROOT\CLSID{031E4825-7B94-4dc3-B131-E946B44C8DD5}\ShellFolder] "Attributes"=dword:b080010d Changing b080010d to b090010d will hide Libraries from the navigation pane. Hiding/Preventing Access to Drives You can use Group Policy settings to hide and restrict access to drives on the RD Session Host server. By enabling these settings you can ensure that users do not inadvertently access data stored on other drives, or delete or damage programs or other critical system files on drive C. The following settings are located in the Group Policy Management Console under User Configuration\Policies\Administrative Templates\Windows Components\Windows Explorer: Hide these specified drives in My Computer. You can remove the icons for specified drives from a user's My Computer folder by enabling this setting and using the drop-down list to select the drives you would like to hide. However, this setting does not restrict access to these drives. Prevent access to drives from My Computer. Enable this setting to prevent users from accessing the chosen combination of drives. Use this setting to lock down the RD Session Host server for users accessing it for their primary local-drives-of-an-rdsession-host-server-while-using-remoteapp-programs.aspx

No community discussion yet for this question.