You deploy a Microsoft RemoteApp program on a Remote Desktop Session Host (RD Session Host)
server farm. The RD Session Host servers run on Windows Server 2008 R2. When users log in to the
RemoteApp program, a list of the local drives of the RD Session Host servers is displayed. Users often
save files on local server drives in the Downloads folder and on the server desktop of the RD Session
Host servers. You need to ensure that a list of local drives and folders on the RD Session Host servers
is not displayed to users. The solution cannot negatively impact performance of the RemoteApp
program. Which two actions should you take? (Each correct answer presents part of the solution.
Choose two.)
A.
Deploy the Group Policy settings for Folder Redirection to redirect the Application Data, Desktop,
and My Documents folders to the RD Session Host servers.
B.
Deploy the Group Policy settings Hide these specified drives in My Computer and Prevent access
to drives from My Computer to the RD Session Host servers.
C.
Modify the registry on each RD Session Host server to hide Favorites and Libraries from the
navigation pane.
D.
Configure the NTFS permissions on the RD Session Host servers to restrict access to the local
server drives.
Explanation:
The primary reason to remove Favorites and Libraries and access to drives is because they contain
mostly accessed locations on a system, so in the case of the RD Session Host server, this includes the
desktop, downloads, recent places, etc. It is recommended that a user not save any documents to
these locations. Removing Favorites and Libraries You must perform these modifications on the RD
Session Host server. You can use the Registry to make these changes. Using the Registry (applies to
all users including the administrators) 1. For Favorites, the key is:
[HKEY_CLASSES_ROOT\CLSID\{323CA680-C24D-4099-B94D-446DD2D7249E}\ShellFolder]
“Attributes”=dword:a0900100
Changing a0900100 to a9400100 will hide Favorites from the navigation pane.
2. For Libraries, the key is:
[HKEY_CLASSES_ROOT\CLSID\{031E4825-7B94-4dc3-B131-E946B44C8DD5}\ShellFolder]
“Attributes”=dword:b080010d
Changing b080010d to b090010d will hide Libraries from the navigation pane.
Hiding/Preventing Access to Drives You can use Group Policy settings to hide and restrict access to
drives on the RD Session Host server. By enabling these settings you can ensure that users do not
inadvertently access data stored on other drives, or delete or damage programs or other critical
system files on drive C . The following settings are located in the Group Policy Management Console
under User Configuration\Policies\Administrative Templates\Windows Components\Windows
Explorer: Hide these specified drives in My Computer. You can remove the icons for specified drives
from a user’s My Computer folder by enabling this setting and using the drop-down list to select the
drives you would like to hide. However, this setting does not restrict access to these drives. Prevent
access to drives from My Computer. Enable this setting to prevent users from accessing the chosen
combination of drives. Use this setting to lock down the RD Session Host server for users accessing it
for their primary desktop. http://blogs.msdn.com/b/rds/archive/2011/05/26/how-to-restrict-usersfrom-accessing-local-drivesof- an-rdsession-host-server-while-using-remoteapp-programs.aspx