Re: User settings getting filtered out
- From: "Bruce Sanderson" <bsanders@xxxxxxxxx>
- Date: Sun, 14 Aug 2005 22:34:20 -0700
A couple of observations about this discussion:
1. it is not necessary to put all of the User Settings and Computer Settings
into a single GPO for loopback processing to work. I always keep User
Settings and Computer Settings in separate GPOs, loopback or not. I know
this works because we have a set of about 30 Terminal Servers in an OU with
two GPOs linked: one that has Computer Settings that turns on loopback
processing and a second GPO with the User Settings that are applied to users
when they logon to the Terminal Servers. The User Settings in this second
GPO are definitly being applied.
2. Unless there is a very specific reason, I suggest not changing the
security settings for GPOs from the defaults. Security filtering can only
stop (prevent) a GPO from being applied; they can not force application and
the default security settings are perfectly appropriate for most situations,
changing them for no good and valid reason just adds unnecessary complexity.
The only reason for applying a security filter is to prevent settings
applying in specific instances - such as, to prevent User settings from
applying to Administrators when they logon to Terminal Servers.
--
Bruce Sanderson MVP Printing
http://members.shaw.ca/bsanders
It is perfectly useless to know the right answer to the wrong question.
"Bart-man" <Bartman@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:7914272D-9700-46A8-BD40-C3558F36A728@xxxxxxxxxxxxxxxx
> Here's my setup:
>
> I have a Terminal Server OU in which I've placed my terminal server
> computer
> acct.
>
> I've created a GPO called "Loopback" that has only the Loopback (replace)
> setting enabled, and I've linked it to my Terminal Server OU.
>
> I've created a GPO called "TermServer Computer Settings" that has only
> computer configuration settings set, with user configuration settings
> disabled, and I've also attached that to the Terminal Server OU.
>
> I've created a GPO called "TermServer User Settings" that has only user
> configuration settings set, with computer configuration settings disabled,
> and I've also attached that to the Terminal Server OU.
>
> On all three GPO's I have set as Security filters, the Terminal Server
> machine acct. and "Authenticated users".
>
> Replication, DNS, etc. all work fine on the lan.
>
> When I login to the Terinal Server and run gpresult, all User settings are
> listed as Denied: Filetered (Security). No matter what I've tried, I
> cannot
> get any User settings to take.
>
> I am logging into the Terminal Server over a fast VPN connection to a
> datacenter. The Terminal server is in front of a firewall at the data
> center,
> the Domain Controller is on the backside of the firewall.
>
> Anyone have any ideas on how to get my User settings to take effect??
>
> Thanks,
>
> Bart-man
.
- Follow-Ups:
- Re: User settings getting filtered out
- From: Mark Heitbrink [MVP]
- Re: User settings getting filtered out
- References:
- User settings getting filtered out
- From: Bart-man
- User settings getting filtered out
- Prev by Date: How do I disable access to Start > "Programs"
- Next by Date: RE: XP SP2 Firewall
- Previous by thread: Re: User settings getting filtered out
- Next by thread: Re: User settings getting filtered out
- Index(es):
Relevant Pages
|
