Loopback Processing with Security Groups (No separate OU)

Hi,

I have Terminal Servers in different OUs which are maintained as per
the site( say Newyork, Italy etc) and I would like to set few
Computer/User restrictions on these servers located in Newyork OU only
for now.

I do not want to create any separate OU but would like to get my work
done with security groups which has my Terminal Servers as members.
Will it work if i do as below,

* Create a GPO
* Apply Terminal Servers security group to GPO
* Link it to NewYork OU

If above is possible then it really helps me to configure restrictions
only for Terminal Servers excluding rest of the servers in NewYork OU
without disturbing our current OU struct. For testing i did below

a) I created a GPO, configured all computer and user restrictions,
linked that GPO to Separate OU which has only 1 server ( Terminal
Server) and filtered the GPO to authenticated users and i could see
that both computer and user restrictions got applied this way

b) Now removed the Authenticated Users and just added the server alone
to the GPO and tried but this time only computer settings got applied
but not users setting

Could someone help me to know how to get the work around for my
problem.

Thanks in Advance.

.

Relevant Pages

  • Re: Loopback Policy Not Taking Effect
    ... Have you rebooted your servers yet? ... Terminal Servers in the OU ... loopback GPO to the "Terminal Servers" OU but to the OU that holds my TS ... ad TS Lockdown Policy and assigned them mostly Computer ...
    (microsoft.public.windows.terminal_services)
  • Re: Limited Desktop Policy for specific users/groups to specific serve
    ... > users/groups to only select servers (e.g. Terminal Servers)? ... Look at the Loopback mode for GPOs. ... Remember that usually the User-specific part of the GPO applying to the ...
    (microsoft.public.windows.server.active_directory)
  • Re: Loopback Processing with Security Groups (No separate OU)
    ... Computer/User restrictions on these servers located in Newyork OU only ... Apply Terminal Servers security group to GPO ...
    (microsoft.public.win2000.group_policy)
  • Re: help with domains
    ... You use the TS Profile so that users can roam between terminal servers and ... do active directory stuff for each user, ... and then another domain for the terminal servers. ... can set up roaming profile for users when they are using their pcs as ...
    (microsoft.public.windows.server.active_directory)
  • Re: Service Pack 1 and Terminal server cluster
    ... reporting the solution here, Devlin! ... The servers ran without issue for two weeks. ... Two of these boxes are terminal servers the others ... > match my reboot problem pretty well. ...
    (microsoft.public.windows.terminal_services)
Loading