Re: Windows 2000 Server GPO with Windows 2003 Server Terminal Serv

Florian,

Great artical!

Ok, I'm thinking that Group Policy Loopback is the problem. I do not have
this currently configured for anything. So, I enabled this and now Im not
sure which to choose as for merge or replace. Is there a common one to use
so that I can still have people locked down and have Admin account with full
rights?

Next, if I have my Terminal Server GPO linked to the Server 2003 computer?
Will all the changes I made in computer/user configuration apply to just the
terminal server users or all users including admin?

Thanks again.


"Florian Frommherz [MVP]" wrote:

Howdie!

Daniel schrieb:
I did have eventlog errors. These errors were coming up saying that gpt.ini
was not found (couldn't find the GPO in the 2000 server because they were
deleted or gone). The other one I am getting is the Group Policy client-side
extension Scripits failed to execute. Please look for any errors reported
earlier by that extension. This is under the Application log. As for the
other logs, everything looks good.

Hmm - DNS is working well? Policy application runs "normally"? When
running "gpupdate /force" on a client machine, do errors appear (in the
event log?)

I think it might have to do with loopback processing mode....Let me ask
though, after I set this I do want to merge them? Is that right? Also will
this affect all my terminal users including the local Administrator account?
All the users are listed in the Remote Desktop Group. I wish I could just
link that group to the lockdown OU I made, but I cant seem to find out how.

It should work like this: http://www.frickelsoft.net/blog/?p=63 - but
first check GP processing works well.

cheers,

Florian
--
Microsoft MVP - Windows Server - Group Policy.
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
Use a newsreader! http://www.frickelsoft.net/news.html

.

Relevant Pages

  • Re: Windows 2000 Server GPO with Windows 2003 Server Terminal Serv
    ... I guess the next big question is how do I apply group policy for all my ... terminal server users without effecting the administrator account. ... Replace mode only looks at the "USer Configuration" ...
    (microsoft.public.windows.server.active_directory)
  • RE: Several Problems; how to reset security and troubleshoot serve
    ... Security Templates in Windows Server 2003 - ... The Network Service account must be added to the policy settings in the ... This issue may occur if Group Policy settings that were applied at ... When you tried to launch the Remote assistance, ...
    (microsoft.public.windows.server.sbs)
  • Re: applying settings to clients forcefully
    ... Yes it's member server of the infrasoft.lan domain and i am not using any terminal services of that machine, nor it's configured as terminal server. ... > Windows 2000 IP Configuration ... > Microsoft Windows Operating System Group Policy Result tool ...
    (microsoft.public.win2000.group_policy)
  • Re: applying settings to clients forcefully
    ... How many DC, DNS server, are they all connected in one physical location, via switches? ... Ethernet adapter Local Area Connection: ... Windows 2000 IP Configuration ... Microsoft Windows Operating System Group Policy Result tool ...
    (microsoft.public.win2000.group_policy)
  • Re: ts2003, users hung at black screen
    ... to change the group policy for the screen saver? ... Terminal Services Configuration, ... * a screen saver on the Terminal Server; can be disabled in a Group ...
    (microsoft.public.windows.terminal_services)