Foreword
Finally, I was able to overcome my laziness and write the third part. As a result, we have a configured terminal server with limited access to data and lists of allowed programs. In this part, we will finish the fine-tuning of user desktops, as promised, we will consider the Installation, Configuration, and optimization of 1C, as well as the differentiation of access to the database. Let's get started.
We clear the desktop from unnecessary shortcuts
Let's create a Group Policy named "Clear Desktop" and link it to the department in which the users of our server are located
Let's set the policy settings> User Configuration> Policies> Administrative Templates> Start Menu and taskbar we find there Hide general program groups in the Start menu
as a result, all shortcuts from the user's desktop will be cleared. now let's fill it with what we need
We place the necessary application shortcuts on the user's desktop
Let's create a Group Policy named "Label Publishing" and link it to the department in which the users of our server are located
Let's set the policy settings> User Configuration> Policies> Settings> Windows Configuration> Shortcuts> RMB create> shortcut
Fill in the form that opens, Data can be copied from an existing shortcut by right-clicking on it and selecting properties, in the "Placement" field, select Desktop
, .
" "
> > > > > " "
,
, PowerShell Export-StartLayout -Path d:\123.xml path
1
1 1 , .
> > > >
DFSS 1
Windows Server 2012 Dynamic Fair Share Scheduling (DFSS ) 1: 8 . Dynamic Fair Share Scheduling. . Dynamic Fair Share Scheduling 1: , , . ยซยป , I/O .
:
. , PowerShell :
(gwmi win32_terminalservicesetting -N "root\cimv2\terminalservices").enabledfss
1 โ , 0 โ .
0, .
. 1, . windows (regedit) : *1. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Quota System EnableCpuQuota 0.
2. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TSFairShare\Disk EnableFairShare 0. .
. 40 10 ( )
Set-Itemproperty -Path Registry::"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Quota System\" -name EnableCpuQuota -Value 0
Set-Itemproperty -Path Registry::"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TSFairShare\Disk\" -name EnableFairShare -Value 0
Get-Itemproperty -Path Registry::"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Quota System\" -name EnableCpuQuota
Get-Itemproperty -Path Registry::"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TSFairShare\Disk\" -name EnableFairShare
0
2 1,
sc config Themes start=disabled
sc Stop Themes
sc config
WSearchstart=disabled
sc Stop
WSearch
sc config
CscServicestart=disabled
sc Stop
CscService
1
> > > > > " " > >
1, , 2.5 1 .
( )
, https://habr.com/ru/post/556296/
1,
NTFS ,
1 , d:\access\1cestart.cfg
C:\ProgramData\1C\1CEStart\1cestart.cfg
"CommonCfgLocation=d:\access\1cestart.cfg"
160 1
163
1, 1
1, ,