Re: Two different Policies for same user

From: Marin Marinov (mlmarinov_at_askme.ca)
Date: 05/25/04 

Date: Tue, 25 May 2004 17:31:20 -0400

In article <1228501c44266$df009030$a501280a@phx.gbl>,
anonymous@discussions.microsoft.com says...
> How can I apply a policy to taske effect only when the
> user logs on to a terminal server
>
Use a GPO linked to the OU where the Terminal Server computer account
resides. Configure the respective settings in the User Configuration
section and make use of loopback processing:
Administrative Templates\System\Group Policy\"User Group Policy loopback
processing mode"

Check out this KB article which specifically addresses your problem:

"How to Apply Group Policy Objects to Terminal Services Servers"
http://support.microsoft.com/?kbid=260370

HTH 

-- 
Cheers,
   Marin Marinov
   MCT, MCSE 2003/2000/NT4.0,
   MCSE:Security 2003/2000, MCP+I
-
This posting is provided "AS IS" with no warranties, and confers no 
rights.

Relevant Pages

  • Re: Group Policy Template for Terminal Service
    ... 192794 How to apply System Policy settings to Terminal Server ... Go into the Properties for that GPO and add Read and Apply Group Policy ... "Hide the dropdown list of recent files" settings. ...
    (microsoft.public.win2000.group_policy)
  • Re: Locked out of group policy on domain controller
    ... If the policy is limited only to user configuration part/settings, i would try to built a GPO, linked to a new OU with all the users that should apply it, so that only the users aregetting the setting's, that should get it. ... My group policy to lock down the terminal server/domain controller ... Short of adding a third server to handle Terminal Server business, ... So what happens if you open ADUC, properties of Domain controllers ...
    (microsoft.public.windows.group_policy)
  • RE: TS User Lockdown
    ... I'd check in a Group Policy or Active Directory forum with one of their ... default domain controllers GPO that could cause unintended affects. ... don't do many deployments of Terminal Server or Citrix on Domain Controllers. ...
    (microsoft.public.windows.terminal_services)
  • Re: Lock down a Terminal Service server
    ... so long as you give Deny "Apply Group Policy" on the ACL of the policy. ... Normal users will be logging onto a Terminal Server in its own OU. ... In the Group Policy tab of Active Directory Users and Computers highlight ...
    (microsoft.public.windows.terminal_services)
  • RE: Security Groups, OUs and Group Policy
    ... Welcome to the SBS newsgroup. ... under User Configuration in the Group Policy Object ... experience and prevent access to areas of the terminal server. ...
    (microsoft.public.windows.server.sbs)