Re: Terminal Services and GPOs

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance



Thanks again Meinolf,
I will work through your suggestions, and hopefully get it working.
Regards
AndyH

On Sun, 2 Sep 2007 00:56:26 +0000 (UTC), Meinolf Weber
<meiweb(nospam)@gmx.de> wrote:

Hello AndyH,

Easiest part to check is with gpresult. It shows every policy applied.

But one thing that you should use on TS's is loopback processing.

http://support.microsoft.com/kb/231287

http://support.microsoft.com/kb/192794

http://technet2.microsoft.com/windowsserver/en/library/335f522d-c153-455b-afa1-855ff1d1a2651033.mspx?mfr=true

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.

thank you for the info Meinolf.
I thought I covered everything in setting up GP, but I must have
missed something. I'll keep trying.
Thanks again,
AndyH
On Sun, 2 Sep 2007 00:19:41 +0000 (UTC), Meinolf Weber
<meiweb(nospam)@gmx.de> wrote:

Hello AndyH,

Group policies will also work for admins if you configure them right.

If you install TS in application mode you have 90 days as trial
period, after that time you must install the licenses per user.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and
confers
no rights.
I was trying to prototype a Terminal Services scenario to
demonstrate possibilities to my boss.

I thought I may be able to use TS for Admin to show how Group Policy
interacts with a session. However I cannot get GP to work in this
context.

I have concluded that GPOs only work with TS for Applications and
not TS for Admin. Is this true?

If this is the case then is it possible to set up TS for
Applications for a trial period before comitting to the necessary
number of TS-Cals?

AndyH




.



Relevant Pages

  • Re: PF Admin tool & Administrative Rights
    ... Best regards, ... Visit my website: http://www.infinitec.de ... > Actually I am testing with our lab server and the Ex admin path is ... > I tried to update the security descriptor for the same path but getting ...
    (microsoft.public.exchange2000.development)
  • [Full-Disclosure] openssl exploit code (e-secure-it owned)
    ... Erik has a point with regards to securing your own boxes. ... up with mailing lists in your own time, ... Or maybe you'd be willing to pay for another admin to work half-day to keep ...
    (Full-Disclosure)
  • Re: AW: [Full-Disclosure] no more public exploits
    ... An admin who chooses ... >to ignore these probabilities isn't looking at their job with the right ... "Knowing what you don't know is more ... Regards, ...
    (Full-Disclosure)
  • RE: Can anybody please confirm this?
    ... That's a default dehaviour as you cannot modify the settings of Admin. ... security objects are disabled for Admin. ... Regards, ... "MNA" wrote: ...
    (microsoft.public.project.pro_and_server)
  • RE: help
    ... I presume it is on a domain? ... If you are on a domain have a look in Computer Management under local users ... and groups and ensure know one else is Admin on yuor machine except you ... Regards, ...
    (microsoft.public.windowsxp.security_admin)