Re: Terminal Services Policy

From: Andrew Mitchell (amitchel_at_removecasey.vic.gov.au)
Date: 03/25/04 

Date: Thu, 25 Mar 2004 04:09:09 -0800

"Steven L Umbach" <n9rou@no-spam.ameritech.net> said

> I don't think you have to do that if you put the TS computer in it's own OU
> where you configure that GPO to enable loopback processing and leave GPO
> permissions at default which would apply to authenticated users, at least
> that has been my experience. --- Steve
>

That's correct. The only thing I would add would be to set the 'Apply Group
Policy' permission to 'deny' for the domain admins group. If you don't do
this, the administrators are affected by the GP in exactly the same way as
any other user.

Andy.

Relevant Pages

  • Re: GPO Security Filtering
    ... 'apply group policy' permissions by default when its created. ... that any user or computer under its influence will process the GPO by ... This is usually ok unless you further need to filter the policy. ... > a more general Authenticated Users? ...
    (microsoft.public.windows.group_policy)
  • Re: Default GAL
    ... I changed the permissions for authenticated users to deny on list ... No need to use a GPO ...
    (microsoft.public.exchange.admin)
  • Re: Group Police Effect
    ... Other things to check for a Group Policy problem include that the GPO is linked to ... read/apply permissions and no "deny" permissions to the GPO in the ... Domain computers are also members of the authenticated users group. ...
    (microsoft.public.win2000.security)
  • Re: Loopback Processing
    ... As long as loopback is set in one GPO, ... >to be set in any other GPO that falls with the hierarchy? ... >why does it still apply the User Configuration settings. ... >>computer provided it has permissions to the GPO's. ...
    (microsoft.public.windows.group_policy)
  • RE: GPO UPdate ??
    ... I went to client and did the gpupdate /force and I did that at the server ... On this same thread I am trying to add more items to my gpo. ... Do I need the same In the Security Filtering list, Authenticated Users? ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)