Hi,
to prevent users from knowing about other users on a terminal server what can I do?
By default users could:
-browse c:\users\*
-use taskmgr.exe
-tasklist
-qwinsta
-netstat
-? perhaps other commands, applications
to gain information about other users on a Terminal Server like Account Name, processes used, Network Connections.
I could prevent access to the obvoius like eventvwr + other administrative tools, c-drive or adjust permissions on qwinsta.exe but with cmd.exe and taskmgr.exe it already is difficult because it limits users e.g. from ending a hanging process.
Ideally it also would require to whitelist every single allowed application and prevent execution of portable software for users.
Are there any recommendations?
thank you
Markus