Re: best method to restrict application execution on terminal servers

Tech-Archive recommends: Speed Up your PC by fixing your registry

what if you only wanted the policy to apply to the users when they log on
through terminal servers on not at there regular desk PC?
"ptwilliams" <ptw2001@xxxxxxxxxxx> wrote in message
news:%23D3BzCMSFHA.3420@xxxxxxxxxxxxxxxxxxxxxxx
> If you apply the user configuration to the terminal servers through
> Loopback
> mode then it will also apply to the domain admins group even with a deny
> permission for the DAs as the terminal servers will be applying the
> policy -not the users.
>
> Better do as you say but apply it to the users (so don't use loopback).
> The
> scope of the GPO will depend on the logical location of the users and the
> number of non-TS users, etc.
>
> --
> Paul Williams
> Microsoft MVP - Windows Server - Directory Services
> http://www.msresource.net | http://forums.msresource.net
>
>
>


.

Relevant Pages

  • RE: No Outlook Email via RDP
    ... Thank you Patrick I appreciate your help. ... those using TS could not login to Outlook. ... Create an OU to contain a set of Terminal Servers ... Enable Loopback Policy Processing in the GPO ...
    (microsoft.public.windows.terminal_services)
  • Re: Group Policy terminal Server
    ... I also created a new group with the 3 terminal servers ... I added these 4 groups to the Terminal Server Policy, ... >> Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA ... >>> the UK, Germany and Holland, and the members of these groups are the ...
    (microsoft.public.windows.server.active_directory)
  • RE: Client configuration RDP-TCP properties
    ... I went in and made a OU and I called it Terminal Servers. ... I denied Apply Group Policy to the ... TS client settings to start the program in RDP_TCP ... then deny the administrator account the apply policy ...
    (microsoft.public.win2000.termserv.clients)
  • Re: Loopback Policy Not Taking Effect
    ... Terminal Servers in the OU ... loopback GPO to the "Terminal Servers" OU but to the OU that holds my TS ... ad TS Lockdown Policy and assigned them mostly Computer ... Filtering: Not Applied ...
    (microsoft.public.windows.terminal_services)
  • Re: TS Srv is also print server. How do you restrict acces / permissions
    ... Create an OU to contain a set of Terminal Servers ... Block Policy Inheritance on the OU. ... Create a GPO called ?TS Machine Policy? ... Check ?Disable Computer Configuration settings? ...
    (microsoft.public.windows.terminal_services)