Re: allow users to connect remotely using terminal services group policy

From: Marin Marinov (mlmarinov_at_askme.ca)
Date: 05/27/04


Date: Thu, 27 May 2004 18:48:45 -0400

In article <9B89B3AC-48CB-4054-BC2E-C060F4656D50@microsoft.com>,
anonymous@discussions.microsoft.com says...
> What I meant was, if there is a GP setting in Win2kserver that can enable remote users on a winXP machine.
>
> The setting is there W2K3, but I have not been able to find it in Win2K Server
>
> Martin
>
Aaah, ok, I see your point now, sorry about that, Martin. Yes, you can
get the updated settings. These are contained in the so-called
"administrative templates files" (files with the .adm extension) and are
updated by each service pack or OS. You'll need to manually upgrade
them, check out these links for more information:

Managing Windows XP in a Windows 2000 Server Environment
http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/mngwinxp.
mspx

How to Upgrade Administrative Template Files
http://www.microsoft.com/windowsxp/pro/using/itpro/managing/upgradetempl
ate.asp

I'd really suggest you get the .adm files from Win2K3 - either from an
installed server or the CD (you'll need to search for *.ad_ files and
then 'expand' them to a temporary folder). This way you'll get all the
new settings and won't have to repeat this for Win2K3. You can just copy
the new .adm files to %systemroot%\inf, overwrite the current files and
when you next open a GPO the GPO Editor will compare timestamps of files
stored in SYSVOL with those in %systemroot%\inf and, by default, will
update the GP with the latest (which, however, can have unwanted effects
in some cases - http://support.microsoft.com/default.aspx?scid=kb;EN-
US;316977). This way you get two benefits - update the GPO and use the
new templates for all new GPOs you create from now on.

HTH

-- 
Cheers,
   Marin Marinov
   MCT, MCSE 2003/2000/NT4.0,
   MCSE:Security 2003/2000, MCP+I
-
This posting is provided "AS IS" with no warranties, and confers no 
rights.


Relevant Pages

  • Re: Loopback processing, roaming profiles, folder redirection for domain-member laptops
    ... I suggest not mixing Computer Settings and User Settings in the same GPO - this restricts your flexibility and can be confusing ... if you put the laptops' user accounts into a seperate OU from the desktops, then you can use loopback processing to apply different User Configuration settings to the laptops and desktops if you also seperate out the settings you want to be different into seperate GPOs ... User Configuration, Network, Offline Files, "Do not automatically make redirected folders available offline" prevents that from happening BEFORE redirecting any folders - its not retro active. ...
    (microsoft.public.windows.group_policy)
  • Re: Loopback processing, roaming profiles, folder redirection for domain-member laptops
    ... I suggest not mixing Computer Settings and User ... Settings in the same GPO - this restricts your flexibility and can be ... Configuration settings to the laptops and desktops if you also ... User Configuration, Network, Offline Files, "Do not ...
    (microsoft.public.windows.group_policy)
  • Re: Getting desperate: GPO applying incorrectly, PLEASE HELP ME!!
    ... User and Computer settings a single GPO,. ... OU with the Terminal Server computer accounts, ... See in particular the section called "Group Policy Loopback ...
    (microsoft.public.windows.group_policy)
  • Re: GPO not picking up computer settings
    ... to the domain container with the password/account settings you want. ... for password/account settings and from what GPO. ... buying any of the highly rated AD or Group Policy books you see at Amazon or ... I have changed all the passwords back to what they were so users are now ...
    (microsoft.public.windows.server.security)
  • Re: Getting desperate: GPO applying incorrectly, PLEASE HELP ME!!
    ... all the settings for lockdown in it. ... I think you are on to something with the linking of the GPO. ... > OU to which the loopback GPO is linked, ... > OU you placed the TS server, and you set loopback on in replace ...
    (microsoft.public.windows.group_policy)

Loading