Re: terminal Services Policies not working

"Vera Noest [MVP]" <Vera.Noest@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:Xns9711AA75AA1C6veranoesthemutforsse@xxxxxxxxxxxxxxxx
> You can filter your GPOs with user groups.
> You should also use "loopback processing" of the GPO, with the
> Replace option.
>
> Details here:
>
> 816100 - How To Prevent Domain Group Policies from Applying to
> Administrator Accounts and Selected Users in Windows Server 2003
> http://support.microsoft.com/?kbid=816100

I don't think that will work here.

I have a server that is only being used as a for Terminal Server.

We have one program that is going to be run on it and don't really want the
outside users (from the web) to be part of the domain (the same as you
wouldn't have people that use web pages be part of a domain).

We are trying to set up 2 sets of users (as well as the Administrators) that
can have 2 different policies. 1st group - the application only - no
desktop. 2nd group - limited desktop access. And of course, we as
Administrators would need full desktops.

We have defined the Users and the Groups from the Computer
Management(Local)/Local Users and Groups.

We then are trying to set up the Policies from the Group Policy Object
Editor. This is where all the policies for Terminal Server seem to be. The
Group Policy Editor for Domains also have some policies for the Terminal
Services but there are only about 4 or 5 and nothing on sessions.

But these Policies are applied across the board to all users and Groups, as
far as I can tell.

Thanks,

Tom

>
> 231287 - Loopback Processing of Group Policy
> http://support.microsoft.com/?kbid=231287
>
> _________________________________________________________
> Vera Noest
> MCSE, CCEA, Microsoft MVP - Terminal Server
> TS troubleshooting: http://ts.veranoest.net
> *----------- Please reply in newsgroup -------------*
>
> "tshad" <tfs@xxxxxxxxxxxxxx> wrote on 17 nov 2005:
>
>> I am running on Windows 2003 Server Standard Edition.
>>
>> I find that some of the policies for Terminal Server don't work
>> (or at least I can't seem to make them work).
>>
>> For example, if you set the program "to start in" in the Group
>> Policy Object Editor, it doesn't work. But if you set it in
>> the Environment tab of the User, it works fine. Same thing with
>> Always Show Desktop. This should show the Desktop, even when
>> you have users start in a particular program. It doesn't!!.
>>
>> Am I missing something?
>>
>> Also, there doesn't seem to be a place for you to set policies
>> for different user groups.
>>
>> We have certain users we want to start in particular programs
>> and not have a desktop, but in another group we have set up we
>> want them to have more control with the desktop.
>>
>> Where is this set - or can you.
>>
>> The Group Policy Object Editor has settings (that don't seem to
>> work - as I mentioned), but they seem to apply to everyone using
>> Terminal Server. An obvious problem would be for Administrators
>> - I want to apply policies, such as no desktop displaying, but
>> not for Administrators or there would be no way to set policies
>> remotely.
>>
>> Thanks,
>>
>> Tom


.

Relevant Pages

  • Re: terminal Services Policies not working
    ... more options for group policy. ... > We are trying to set up 2 sets of users (as well as the Administrators) ... > We then are trying to set up the Policies from the Group Policy Object ... This is where all the policies for Terminal Server seem to be. ...
    (microsoft.public.windows.terminal_services)
  • Re: user and administrator policies
    ... All you really need to do is give "administrators" deny for apply. ... Be sure to install Group Policy Management Console on your domain controller ... FYI Windows 2003 and XP Pro can use Software Restriction Policies managed ... > administrators mchs\administrators deny group policy ...
    (microsoft.public.win2000.security)
  • Re: Group policy problem (XP alone and XP with NT server)
    ... I see you've discovered the fact that some of the policies go ... the GroupPolicy folder whose access permissions you need to ... Double click your Local Group Policy editor shortcut. ... Click on Administrators to highlight that group. ...
    (microsoft.public.windowsxp.security_admin)
  • IEAK6 Profile Manager System Policies & Restrictions - adm files & Win 2k group policy
    ... importing ieak adm files into 2k group policy to apply "system policies ... have created an ou for the terminal server and moved the terminal ...
    (microsoft.public.win2000.termserv.apps)
  • Re: Restrict to 1 program
    ... Easiest is to do this in a Group Policy. ... User Configuration - Administrative templates - Windows Components ... doesn't apply to Administrators: ... I have a win2k3 server setup as a terminal server. ...
    (microsoft.public.windows.terminal_services)
Loading