Question : Problem: Using Software Restriction for Quickbooks in Terminal Services

I am building a terminal server for a client.  It will be used for general use remote access for a small number of users.  Some users will need access to Quickbooks (using Enterprise Solutions edition) but some will not.  Can I use software restriction (or something else) to have Quickbooks active, and show up for users in the Accounting group that exists in AD, and not show up for anyone else?

I haven't used software restriction much in the past, so I'm not totally clear on how it works, and if this would be the right use, how to apply it, etc.

Answer : Problem: Using Software Restriction for Quickbooks in Terminal Services

Here is the how-to on software restriction policies and their various options:

http://support.microsoft.com/kb/324036

I would couple this with a GPO lockdown of your TS desktop - with a standard desktop, start menu and programs folder for most users, and special desktops e.g quickbooks users.

These would have shortcuts to only the programs you want.
Lockdown access to explorer, local drivers etc etc

e.g.
http://technet2.microsoft.com/windowsserver/en/library/7b33dcd6-0ad2-44e8-82f8-962425b6cf8e1033.mspx?mfr=true

Powerful when combined with software restriciton polices.