Re: GP being filtered?

Howdie!

Linn Kubler schrieb:
As you can tell from the policy name that it is intended to be applied to my Citrix servers so I have it linked to an OU that contains my Citrix servers and the Security Filtering is applied to my AD group of Citrix Users.
Since you're linking the policy to an OU full of machines and configure CComputer Configuration settings, why would you only allow user accounts access to the policy? The Citrix servers need to be able to read and apply the policy. They need "Read" and "Apply Group Policy" permissions.

cheers,

Florian
--
Hi Florian,

I thought linking the policy to the OU was giving the servers those rights. What do I need to change then? How do I give the servers "Read" and "Apply Group Policy" permissions?

You actually do this the same way in security filtering as you did with the Citrix users. Leave "Authenticated Users" in security filtering to apply the policy.

So you're trying to have all users who log on to those Terminal Servers have some sort of User Configuration settings, correct? Then you should look at "loopback processing mode":

http://www.frickelsoft.net/blog/?p=22

cheers,

Florian
--
Microsoft MVP - Windows Server - Group Policy.
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
Use a newsreader! http://www.frickelsoft.net/news.html
.

Relevant Pages

  • RE: GPO and Terminal Services
    ... Apply the policy to the OU containing the MetaFrame ... Servers, and enable loopback policy processing (a setting in the Group ... > Citrix servers are configured in a load balance farm. ...
    (microsoft.public.windows.terminal_services)
  • RE: Slow user logon on Terminal server after migration to Windows 2003
    ... The Terminal Servers are 2000 or 2003. ... "Inside the firewall zone" means that the Citrix Servers have a firewall ... available RPC ports? ...
    (microsoft.public.windows.server.active_directory)
  • GPO Filtering Problem
    ... I have a policy containing only user settings which I ... particular group of servers. ... using security filtering to allow only the required user groups and computer ... filtering - however this causes the policy to be applied to every machine the ...
    (microsoft.public.windows.group_policy)
  • Re: GPO Filtering Problem
    ... but you are spot on - loopback processing did the trick. ... > You apply a GPO to the servers. ... > and configure Loopback Policy. ...
    (microsoft.public.windows.group_policy)
  • GP being filtered?
    ... I have a policy setup that I thought was working but I just ran a gpresult ... Citrix servers so I have it linked to an OU that contains my Citrix servers ... and the Security Filtering is applied to my AD group of Citrix Users. ...
    (microsoft.public.windows.group_policy)
Loading