Re: TS Lockdown

From: Mark Renoden [MSFT] (markreno_at_online.microsoft.com)
Date: 10/27/04 

Date: Wed, 27 Oct 2004 10:29:54 +1000

Hi Graham

Computer Configuration applies to the computer and this means anyone who
logs onto the machine. I think the policy settings you're talking about is
under the User Configuration but is in effect because policy loopback is on.
Filtering the policy by using security for admins is the correct approach
here.

Kind regards 

-- 
Mark Renoden [MSFT]
Windows Platform Support Team
Email: markreno@online.microsoft.com
Please note you'll need to strip ".online" from my email address to email 
me; I'll post a response back to the group.
This posting is provided "AS IS" with no warranties, and confers no rights.
"Graham" <Graham@discussions.microsoft.com> wrote in message 
news:8C0550A4-252D-4D2A-88B1-80377984891F@microsoft.com...
> Hello Everyone,
>
> I am in process of locking down my TS following article KB 278295 and have
> some issues. The main issue is that for the Computer Configuration part in
> the GPO it applies to my Admin account e.g. if I disable the windows
> installer it affects my Admin account and I have set "Deny" to all my 
> admin
> accounts.
>
> Anyone have any ideas?
>
> Thanks,
> Graham

Relevant Pages

  • Re: Option to edit local security policy option is greyed out
    ... Configure the policy from Active directory, even if you set it locally the ... only reply to Newsgroups ... account the right to "Log on as a service" on the local machine. ... using a domain admin account as well as the local admin account. ...
    (microsoft.public.windows.server.general)
  • Re: Start a program on connection and Windows XP
    ... Group Policy Modeling does show the policy being applied on that computer. ... But the GPO should be applied to the OU which contains the TS machine ... Did you define the initial program in the Computer Configuration part ... the user connects with RDC they just get the usual Windows ...
    (microsoft.public.windows.terminal_services)
  • Re: Group policy-information stored
    ... It might help if it you can post your computer configuration gpresult from a domain ... Domain account/password policy may not apply to local machine accounts for domain ... The computer received "Registry" settings from these GPOs: ...
    (microsoft.public.win2000.group_policy)
  • Re: Offline files settings in GPO and Synchronization settings dif
    ... so the policy is applying. ... understood, how the policies were applied, I had computer configuration ... Configuring Group Policy for Offline Files ... Tools menu, Synchronize, and setup options, I notice that the box is ...
    (microsoft.public.windows.server.active_directory)
  • Re: get rid of cached domain credentials?
    ... As long as your computer is a member of the domain, computer configuration ... policy will always apply to it and user configuration will always apply to ... > 4 days a week my main computer is hooked up with the domain controller. ...
    (microsoft.public.windows.server.active_directory)
Loading