Re: Assign Group Policy from 2000 server

From: Dmitry Korolyov [MVP] (d__k_at_removethispart.mail.ru)
Date: 03/31/04 

Date: Thu, 1 Apr 2004 00:19:13 +0400

Yes, this is definitely possible, and you should use a loopback processing
feature of the group policy to achieve this. Do a search for loopback
processing in KB, you should get a decent info. But basically, loopback
processing is when a "User Confuguration" part of the GPO applied to
*computer* (not the user) object affects the user. 

-- 
Dmitry Korolyov [d__k@removethispart.mail.ru]
MVP: Windows Server - Active Directory
  "Nathan Barry" <anonymous@discussions.microsoft.com> wrote in message 
news:1352901c41218$d2854180$a101280a@phx.gbl...
  Thanks Dmitry
  Sorry maybe I'm heading in the wrong direction, What I'm
  trying to do is assign a desktop redirection and other
  policy settings for users when they logon to the terminal
  server but not when they log on to a windows 2000
  workstation. Is this at all possible?
  Thanks
  >-----Original Message-----
  >Foder redirection policy applies to user accounts, not
  computer accounts.
  >And you mentioned that the only account affected by this
  policy is the
  >computer account of W2k3 terminal server. Or do you use
  loopback processing
  >mode?
  >
  >The policies are generally compatible between each other;
  there are many new
  >settings in W2k3, but they are still compatible.
  >
  >-- 
  >Dmitry Korolyov [d__k@removethispart.mail.ru]
  >MVP: Windows Server - Active Directory
  >
  >  "Nathan Barry" <support@itworks.com.au> wrote in
  message
  >news:1333a01c411e4$2f66f9f0$a101280a@phx.gbl...
  >  Hi all
  >
  >  I'm having an issue which I'm not sure is built in by
  >  default, I have an exsisting 2000 domain with a 2000
  >  Terminal Server running which also acts as a domain
  >  controler. We needed to move to a 2003 Terminal Server
  to
  >  take advantage of the higher colour settings, and at the
  >  same time take the domain controler role from the
  >  terminal server. So I'm left with a Windows 2000 server
  >  setup as a DC on a 2000 Domain, with a Windows 2003
  >  Server setup as a TS and joined to a 2000 domain.
  >
  >  I then created a new Organisation Unit called Terminal
  >  server in my Active Directory of the 2000 domain. Then I
  >  moved the 2003 server to this OU, and setup a group
  >  policy to redirect users desktops and start menus. but
  it
  >  doesn't seem to work even though the user has the policy
  >  applied.
  >
  >  So does anyone know if you can assign group policys to a
  >  2003 server from a 2000 server, or do we need both
  >  servers to be 2003?
  >
  >  Thanks in advance
  >

Relevant Pages

  • Re: Terminal Server with SBS 2K3
    ... All of these problems only occur on the Terminal Server, there are others, ... > Microsoft CSS Online Newsgroup Support ... > |> policy and the local policy of the terminal server. ...
    (microsoft.public.windows.server.sbs)
  • Re: How to allow users to create groups and shares
    ... Add the user/group to the Computer configuration, windows settings, security settings, Local policies, "Allow logon locally" in the Default domain controllers policy and on a existing or new created policy for the member servers. ... Filtering: Not Applied ... check with GPMC on the server or from a client the policy settings. ...
    (microsoft.public.windows.server.active_directory)
  • Domain Controller Security Policy errors
    ... Security Policy or the Domain Controller Security Policy. ... The DC is also a print and file server. ... The domain controller for Group Policy operations is not available. ...
    (microsoft.public.win2000.active_directory)
  • RE: Cant set Local Security policies. They fail to save
    ... predefined Security Template on SBS 2003 to restore security groups ... run "gpupdate.exe /force" under command prompt to force the policy ... reboot the Server to test. ... and then logon to client computer to test if user can save system logs. ...
    (microsoft.public.windows.server.sbs)
  • Re: Security Logon/Logoff Events
    ... I haven't yet set password policy or configured account lockout policy so I ... will do that in due course to fully secure the server. ...
    (microsoft.public.windows.server.sbs)
Loading