Re: Terminal server lockdown

Tech-Archive recommends: Fix windows errors by optimizing your registry



Why don't you create a AD group, or use the groups you already have defined
for you various users and put these in the Scope of the GPO and remove the
Authenticated Users?

Then any group not listed in the scope will not get the GPO applied.

Jules

"Mark Bowles" <MarkBowles@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:05932A17-9C6D-404A-ADF1-4FC49AC3EA3F@xxxxxxxxxxxxxxxx
I have the same issue. Where do you deny permissions for administrator?

Mark

"DJ" wrote:

Gee wiz, that is so obvious. I have it so drilled in my head to avoid
Deny
permissions that I didn't even consider it. Thanks.

"Richard Gadsden" wrote:

DJ wrote:
I'm putting together a GPO for locking down terminal server user
sessions. I
created a loopback policy that enforces the user settings in the
terminal
server's policy. However, the settings also apply to administrators
that
login to the server. How do I prevent these settings from applying
to
administrators?

Set the permission on the policy to deny it to administrators.

--
Richard Gadsden
"I disagree with what you say, but I will defend to the death
your right to say it" - Attributed to Voltaire



.



Relevant Pages

  • Re: Free Will
    ... scope for choosing how we live. ... suicide, much like the final outcome of cancer is death, I think perhaps ... she was born she was very welcome - she was born in free will. ...
    (soc.religion.quaker)
  • Re: Free Will
    ... scope for choosing how we live. ... suicide, much like the final outcome of cancer is death, I think perhaps ... she was born she was very welcome - she was born in free will. ...
    (soc.religion.quaker)
  • Re: To Hungarian or not to Hungarian
    ... prefix that denotes whether the item is a parameter, ... The type, but not the scope. ... I personally do not use prefixes for local variables. ... "Death is one of the few things that can be done as easily lying ...
    (borland.public.delphi.non-technical)
  • Re: backreferneces in search pattern
    ... > pair that matched an empty string because it was inside the scope of a ... Many live that deserve death. ...
    (comp.lang.perl.misc)
  • Pity Madam Zuraimah
    ... That great injunction of Voltaire was, 'I don't agree with what you ... but I will defend to the death your right to say it.' ... he is advocating a new style of violence on Singaporeans, worse, much ...
    (soc.culture.singapore)