Re: Computer componet of GP not being applied

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Andrew (arheaume_at_bridgetech.com)
Date: 09/14/04 

Date: Tue, 14 Sep 2004 09:01:45 -0400

It all seems to be linked to the local user groups on the terminal server.
When they are in the admin local group, I get all the locked down settings,
but if I move the user to the local user group they are not locked
down...suchs as I can open a dos prompt and execute commands.
Not sure what you mean by "non-standard permissions"
Yes, the loopback is applied.
The user are in a different OU then the Terminal Server.

"Mark Renoden [MSFT]" <markreno@online.microsoft.com> wrote in message
news:OUBm1eUmEHA.2180@TK2MSFTNGP12.phx.gbl...
> Hi Andrew
>
> This doesn't sound right. Computer Configuration settings are applied
> before login and as such, have nothing to do with the user account.
>
> Do you have any non-standard permissions set on the GPO?
>
> Are you using policy loopback?
>
> Are the user accounts in a different OU or the same OU as the Terminal
> Server?
>
> Kind regards
> --
> Mark Renoden [MSFT]
> Windows Platform Support Team
> Email: markreno@online.microsoft.com
>
> Please note you'll need to strip ".online" from my email address to email
> me; I'll post a response back to the group.
>
> This posting is provided "AS IS" with no warranties, and confers no
rights.
>
> "Andrew" <arheaume@bridgetech.com> wrote in message
> news:%237MITsSmEHA.3712@TK2MSFTNGP15.phx.gbl...
> > I'm restricting computer settings for terminal server clients via group
> > policies using a windows 2003. My problem is when the user logs in via
> > terminal services and their account in located in the local
Administrators
> > group on the Terminal Server the group policies (user/computer) are
> > applied.
> > This is good. Now I would like to move the Terminal server users from
the
> > local administrator group to the local users group on the Terminal
server.
> > When I do this, the user component of the group policy is applied but
not
> > the computer component. I have verified this using gpresult.
> >
> > Any insight on this issue would be appreciated.
> >
> >
>
>

Relevant Pages

  • RE: W2K3 Server x64, default language for user
    ... installing the MUI to have two folder for documents and settings ... One in german and one in english, ... user account and copied the profile "over" the default user. ... I'm running a W2K2 server x64 as a terminal server. ...
    (microsoft.public.windows.terminal_services)
  • Re: Locking down TS on Domain Controller...
    ... User config settings apply to users. ... I would like to lock down the Terminal Server experience for those ... Everything (minus the TS Lockdown GPO) is working. ... and I log on to that using the user account object of one of the five TS ...
    (microsoft.public.windows.terminal_services)