RE: Locking down a TS session

Hi SteveninNZ,

You certainly can. You would apply group policies on the OU the Terminal
Server is located in. Not over the users OU.

This article goes int much more detail, the part about Group Policy loopback
mode is important!

How to apply Group Policy objects to Terminal Services servers
http://support.microsoft.com/default.aspx?scid=kb;en-us;260370

Loopback processing of Group Policy
http://support.microsoft.com/kb/231287/

Hope this helps,

Ryan


"SteveninNZ" wrote:

> I have 2 servers, 1 2k3 AD domain server and 1 2k3 TS server. I want to lock
> down only the TS sessions of my users not the users logging into the domain.
> We run one major application via TS and I dont want TS session users to be
> able to do much in a TS session but still want full rights when they log onto
> the domain on their local PC. I have looked at group policies but cant see
> how to give 2 sets of rights to 1 user! Im hoping there is a way to apply
> policy to TS sessions rather than individual users?
> Any help would be appreciated - thanks
.

Relevant Pages

  • Re: disconnected session logging off, shouldnt
    ... or better: Resultant Set of Policies in the ... Group Policy Management Console) to see which GPOs are applied to ... MCSE, CCEA, Microsoft MVP - Terminal Server ... Even logged-in sessions disappear; after an unspecified amount ...
    (microsoft.public.windows.terminal_services)
  • Re: Logging in takes 20 minutes on SBS
    ...  ipconfig/all from server and a few workstations to ... One of the group policies may be corrupt. ... During the backup, one group policy failed. ...
    (microsoft.public.windows.server.sbs)
  • Re: Need ideas deploying to 50 machines
    ... You've convinced me to look at group policy more closely, ... >>> into Active Directory package deployment via MSIs and let the ... not to mention already paid for in the price of the server. ... using group policies and you can also use ACLs to control who has ...
    (microsoft.public.windowsxp.setup_deployment)
  • Re: Need ideas deploying to 50 machines
    ... >> all you're bothered about is deploying the apps, ... > all that up-to-speed on Group Policy but my experience has been that ... Actually I find Group Policies to be very easy, ... not to mention already paid for in the price of the server. ...
    (microsoft.public.windowsxp.setup_deployment)
  • Re: blocking porn site
    ... using group policy on the Windows 2000 Group Policy forum: ... your server through the use of Group Policies. ... employees are allowed to visit, and deny access to the rest of them. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)