serious problem

[meir]

Peace

I stand before you purchase the product TSplus

But I have a very serious problem I would like to know whether the product belongs to overcome it ?,

I'm going to run my client app, and that there was "no way they could access the server.

But here I found an article on the site of the operator of the software TSplus http://www.terminalserviceplus.com/docs ... rl-address

Guides how to open all sorts of programs from the server and so on.

I would like to know whether belongs to block any possibility that customers at the user level,
And of course not to affect the Admin.

Please solving urgently !!!

Waiting to hear

serious problem

[admin]

Hello,

I am sorry but I have a hard time understanding what is your issue here.

1- You will find below all of the basics information you need to know to start using TSplus efficiently :

I recommend you to watch this video to get you started with TSplus : terminalserviceplus.com/videos/start-your-remote-desktop-solution.php

You will find here a documentation on how to publish new applications : terminalserviceplus.com/docs/application-publishing

And how to assign these applications to users : terminalserviceplus.com/docs/assigning-applications-to-users-or-groups

2- Securing your server :

To secure your server you could use the floating panel or remote taskbar. Doing you will provide a menu with a list of application assigned to your users / group instead of a full remote desktop, preventing your users from being able to browse your server.

More information about the use of the floating panel and remote taskbar can be found here : http://www.terminalserviceplus.com/docs ... ting-panel

The hide drive feature hides drive, it cannot prevent access to your users and allows them to launch applications from hidden drive. If you activate the "prevent access to the selected drives" group policy, your users will not have access to these drives at all. Alternatively you can set up NTFS rights to specific folders to prevent access to sensitive data.

More information about the hide drive feature can be found here : http://support.tsplus.net/kb/faq.php?id=29

When setting up group policies you may want to make sure these securities applies only to non administrator users : http://support.tsplus.net/kb/faq.php?id=19

[meir]

I want to avoid any possibility that they could write parameters in the URL bar

like this

c: \\\\ windows \\\\ system32 \\\\ notepad.exe & startupdir = c: \\\\ windows \\\\ system32 & params =

As well as hide drives, you can get around it, as one of your representatives told me how to open a hidden drive.

[admin]

Hello,

I want to avoid any possibility that they could write parameters in the URL bar

like this

c: \\\\ windows \\\\ system32 \\\\ notepad.exe & startupdir = c: \\\\ windows \\\\ system32 & params =

I will ask more information to our developer team about this.

As well as hide drives, you can get around it, as one of your representatives told me how to open a hidden drive.

Regarding security, there is a lot to say. Everything depends on what you wish to achieve. If you wish to publish a folder that would be secured, you can use the folder application : http://www.terminalserviceplus.com/docs/folder

[John]

Hello,

We did develop for you a new security feature.
It will be included into the upcoming 9.40 release of TSplus.
It will enable the administrator to prohibit the use of command lines to request one application to be started when a session is opening.

Kind regards

John Davies

[meir]

Thank you

When you release a new version?

[IvanGB]

Hi guys.

We really need the feature to disable the possibility to enter a command line in the URL to automatically open an application (which could be CMD.EXE!) by any user. This completely breaks security.

It sounds like you have done it already and it should be available on version 9.40, but I don't seem to be able to find it. Hasn't this been implemented yet?

Thanks.

Ivan

[meir]

hi Ivan


Edit with Notepad C:\Program Files (x86)\TSplus\UserDesktop\files\AppControl.ini
In the [Security] paragraph add the following variable
appcmdline=no
Doing so, you prohibit any user to be able to start one application by command line


Good luck
meir

[IvanGB]

Thank you meir!

Worked like a charm.

Cheers.

Ivan