Re: Group Policy for Terminal Server

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Howdy Rick!

rspatafore@xxxxxxxxx wrote:
I am going to have around 2,000 users once this is complete. Duplicate
users is not an option. I did find an article on TechNet about Terminal
Services and group policies: 260370 & 231287. I am lookign at the
loopback piece of this now, but I do not understand what group policy
is applied to the users once loopback is enabled.

Sorry, I didn't see you already have found "loopback".

Well, you go and activate "loopback" on the Terminal Server's OU and set it to "replace". This will _replace_ all configuration settings users will normally be receiving when they log into a "normal" workstation. Instead of processing the user's configuration, the Terminal Servers will now "load" the user portions of the group policies you applied to them ( - remember: they wouldn't apply the user config portion if loopback wasn't enabled!). Like this, you can asure that _every_ user, no matter to which OU he or she belongs to, receives the same (restrictive) settings on the Terminal Servers.

I hope I could make it a little clearer. If not, feel free to post again!

cheers,

Florian
--
Nachwuschsadmin aus dem Süddeutschen/Germany.
eMail: Vorname [bei] frickelsoft [Punkt] net.
.

Relevant Pages

  • Re: GPO problems
    ... If policy loopback is set in the Computer Configuration of a GPO ... The computer configuration settings from this list are applied to the ...
    (microsoft.public.windows.group_policy)
  • Re: Complex GPO Configuration Issue
    ... > I have read a lot of posts and articles on loopback processing and have used ... > If you enforce a policy then it will override all other polices in the path ... > to the user/computer unless another GPO closer to the user/computer is also ... What I'm getting for user configuration is ...
    (microsoft.public.windows.group_policy)
  • Re: Logging out of Remote desktop
    ... Look at the group policies on the machine to make sure they are configured to disconnect/log off RD ... Navigate to the "Local Computer Policy -> Computer Configuration -> Administrative ... > In our office we use remote desktop extensively however occasionally someone logs out and a ... > subsequent user goes to log in and they get a message stating that the last person is still logged ...
    (microsoft.public.windowsxp.work_remotely)
  • Re: Re: GPO to Disable Screen Saver on a Single Computer
    ... > I have the loopback processing set to merge. ... > is the user from another OU has Screen Saver enabled and the ... User Configuration - Screensave set to disable. ...
    (microsoft.public.win2000.group_policy)
  • Re: Re: cant override screen saver policy
    ... You should be able to apply the Loopback at the Local Policy and as ... long as no one ever sets any loopback settings at ANY Domain level. ... Group Policies are by far the best and easiest route to go. ...
    (microsoft.public.win2000.group_policy)