Question on GPO



I have a Citrix farm running on Windows 2000 Server (metaframe xp FR3).

In my A/D, I have an O/U where I've placed all of my Citrix Servers.
Presently, there are very minor GPO's applied (do not allow shutdown, for
example).

In my A/D, I have separate O/Us based upon Functional Department (Sales,
Marketing, Engineering). I place my User accounts for each department in
their respective O/Us.

I have created a GPO that specifies Folder Redirection and other USER
settings and have linked that GPO to my Functional Department O/Us.

I have created security groups (Sales Desktop Policy, Marketing Desktop
Policy) that contains the members of each group that the GPO policy must be
applied to. This acts like a filter to give us control of having a GPO NOT
apply to someone. For example, If betty and paul are in Sales, but Paul is a
manager and doesn't need to have the GPO apply, I don't have him in the
Sales Desktop Policy security group. The security groups have the ability to
READ and Apply Group Policy rights.

FInally: here's my question:

When one of my users in the Sales OU (who has the GPO applied) logs into my
Citrix box, the Folder redirection and other User Settings are not applying.

I thought user settings were to the USER and not to the computer? Since all
of my destkop management GPO settings are USER settings.

In other words, i would have expected his user profile settings to apply to
the citrix session profile and they are not.

What do I have to do to make the USER GPO settings apply to the user when
they log on to the citrix box.

it seems to me that since my settings are USER GPO settings, that they
should be applying when they logon to the citrix box.




.



Relevant Pages

  • Re: Weird Prob
    ... The only time you need to worry about duplicating settings in a GPO (domain ... > URL sites in two areas instead of the one Default Domain Policy... ... >> to the Citrix policy. ...
    (microsoft.public.win2000.group_policy)
  • Re: IE7 Security Zones and Content Ratings on Terminal Services
    ... This is a general IE hardening problem and maybe something that Citrix may not be handling properly. ... I suggest asking the question on the IE newsgroup and based on the response received from the experts there, you could troubleshoot the problem with Citrix. ... we want to apply these settings to specific users. ... apply those settings to whichever users you apply the GPO to. ...
    (microsoft.public.windows.terminal_services)
  • problems running shortcuts to .exes / GPOs
    ... font-family:Arial'>What settings in the GPO (2000 AD, but 2003 server (Citrix) in this case) do I need to tweak to stop all these 2003 annoying security warnings ... In fiddling around with my GPO, I somehow caused this to happen. ... Windows security settings on this computer probably do not allow files to be changed. ...
    (microsoft.public.win2000.active_directory)
  • Re: Loopback processing, roaming profiles, folder redirection for domain-member laptops
    ... I suggest not mixing Computer Settings and User Settings in the same GPO - this restricts your flexibility and can be confusing ... if you put the laptops' user accounts into a seperate OU from the desktops, then you can use loopback processing to apply different User Configuration settings to the laptops and desktops if you also seperate out the settings you want to be different into seperate GPOs ... User Configuration, Network, Offline Files, "Do not automatically make redirected folders available offline" prevents that from happening BEFORE redirecting any folders - its not retro active. ...
    (microsoft.public.windows.group_policy)
  • Re: Loopback processing, roaming profiles, folder redirection for domain-member laptops
    ... I suggest not mixing Computer Settings and User ... Settings in the same GPO - this restricts your flexibility and can be ... Configuration settings to the laptops and desktops if you also ... User Configuration, Network, Offline Files, "Do not ...
    (microsoft.public.windows.group_policy)