Account Management - MCTS Guide to Microsoft Windows Server 2008 Active Directory Configuration - page 164

membership in this group is one way to give users default rights and permissions. The Set
Primary Group button in this tab is needed only when a user is logging in to a Macintosh,
UNIX, or Linux client computer.
Terminal Services Tabs Four tabs in a user account's Properties dialog box are related to
Terminal Services. The settings in these tabs affect a user's session and connection properties
when connecting to a Windows Server 2008 Terminal Services server:
• Terminal Services Profile —This tab is similar to the Profile tab, in defining where a
user's profile and home folder are located. However, the settings here are used only
when a user is logged on to a terminal server or to prevent a user from logging on to
a terminal server.
• Remote control —You use this tab to configure a user's Terminal Services remote con-
trol settings (see Figure 5-9). When remote control is enabled, an administrator can
observe or interact with a user's Terminal Services session by using the Remote Desktop
client. If the Require user's permission check box is selected, Windows prompts the
user to allow the administrator to view or interact with the session. You use options in
the Level of control section to specify whether you can view a user's session or interact
with it.

Figure 5-9

The Remote control tab

• Environment —You use this tab to configure the Terminal Services startup environment.
You can specify a program to run when the user logs on to a terminal server and determine
whether a user's local drives and printers should be available during a Terminal Services
session.