Hi,
I am in charge of MS Win 2003 std R2 using TS all remote thru DSL. I have 5 users with both CALS. We use MS office and Quik Books we are a non-profit organization and I am a volunteer. I loaded and set up the OS and assigned all users and groups to utilize the MS Office and Quik Books and all works fine.
I was asked if I would set up access for 2 outside of the company people and said they will need 2 more user and TS CALS and I think that will happen.
I set up 2 users and grouped them and I isolated them away from our company folder but it appears if they were smart enough they could get into other things on the system that could hurt something.
The real question is how do I isolate these outside users to 1 folder access and the use of MS Office and Quik Books.
Since I am a newbie as much detail as possible would be a real help for me.
Thanks in Advance!!
Ld

You have to use a combination of restrictive Group Policy settings and NTFS permissions on the file system to lock users out of sensitive areas.

Here are some starters:

How to lock down a Windows Server 2003 or Windows 2000 Terminal Server session

Windows Server 2003 Terminal Server Security White Paper