Re: Security Groups, OU's and Group Policy

Tech-Archive recommends: Fix windows errors by optimizing your registry




Can't do RSoP - I'm using a security group and not individual users...
teh policy can be aplied, it's just having no effect


"Charles Yang [MSFT]" wrote:
> Hi Chris,
>
> Welcome to the SBS newsgroup.
>
> According to your description, I understand that the group policy for
user
> restrictions are not applied to the Terminal service user.
>
> Generally speaking, under User Configuration in the Group Policy
Object
> Editor, you can set several Group Policy settings that are
particularly
> useful for Terminal Server. Use these settings to control the user
> experience and prevent access to areas of the terminal server.
>
> In order to isolate the issue, please gather the information below:
>
> 1. Does it occur to all the terminal user in that OU or only
occur to
> some users?
> 2. Could you tell us which kinds of policy you have applied to
that
> OU, you can run the RSOP follow the steps below and paste the
information
> to the newsgroup:
> A. Click Start, click Control Panel, double-click
Administrative
> Tools, and then double-click Active Directory Users and Computers.
> B. In the console tree, expand Active Directory Users and
Computers,
> expand Domain, expand Organizational unit, and then expand child
> organizational unit.
> C. Right-click the user on which you want to run RSoP, point
to All
> Tasks, and then click Resultant Set of Policy (Planning).




>
> In the RSoP windows please check the results of the policy to that OU
to
> make sure that the restriction have been applied to that OU.
> 3. Could you also perform a test to create a test OU and
applied the
> policy to that OU to see if the policy can be applied?
> 4. Please also check the event view to see if there are any
related
> error message.
>
> More info:
>
> As your convenience, I would like to give you a link refer to group
policy
> in the Windows 2003 domain:
>
>
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/DepKi
> t/a3c78eb9-92fe-42f5-98ad-ae4ad1abe4c2.mspx
>
> Deploying Windows Server 2003 Terminal Server to Host User Desktops
in a
> Windows Small Business Server 2003 Environment
>
>
http://download.microsoft.com/download/7/5/2/75219da3-8c11-496c-978f-e689276
> 2e874/ADS_TermServ.doc#_Toc80682890
>
> I appreciate your time and performing the tests. Please paste you
results
> as your earliest convenience, I am here waiting for your updates.
>
>
> Best regards,
>
> Charles Yang (MSFT)
>
> Microsoft CSS Online Newsgroup Support
>
> Get Secure! - www.microsoft.com/security
>
> =====================================================
> When responding to posts, please "Reply to Group" via your newsreader
so
> that others may learn and benefit from your issue.
> =====================================================
>
> This posting is provided "AS IS" with no warranties, and confers no
rights.

.



Relevant Pages

  • Re: GPO problems when logon to kerberos-realm
    ... when I put the same policy on an OU with e.g. a Windows ... problem when logon to a Terminal Server. ...
    (microsoft.public.windows.group_policy)
  • RE: Controlling access to drive C and IE settings
    ... I suggest you refer to the following article to use the policy below to ... restrict local drives. ... Locking Down Windows Server 2003 Terminal Server Sessions ...
    (microsoft.public.win2000.group_policy)
  • Re: My Documents Still Exists Locally For One User
    ... In the console tree, expand Active Directory Users and Computers, ... Right-click the user on which you want to run RSoP, ... and then click Resultant Set of Policy. ... |Windows Settings | My documents. ...
    (microsoft.public.windows.server.sbs)
  • Re: Problem logging onto TS via RWW
    ... locally" and "Allow log on through Terminal Services" on the local Security ... Policy on the terminal server box as I requested in my previous post. ... Remote Desktop Users Group. ...
    (microsoft.public.windows.server.sbs)
  • Re: Getting desperate: GPO applying incorrectly, PLEASE HELP ME!!
    ... OU to which the loopback GPO is linked, ... So, you have a new OU and a new GPO linked to it, and in this ... is in the computer tree of policy settings. ... > the terminal server as the only thing in it, then set up a new restricted ...
    (microsoft.public.windows.group_policy)