Re: Applying GP to terminal server sessions

I have not tried it, but how about:

GPO for console:

- Allow Apply Group Policy to Authenticated Users (default)
- Deny Apply Group Policy to REMOTE INTERACTIVE LOGON

GPO for remote:

- Allow Apply Group Policy to REMOTE INTERACTIVE LOGON (*only*)

-TP

Daren Daigle wrote:
Actually its not for normal users.

I have a policy that anyone who is a member of the domain admins group
(restricted to 4 people plus service accounts) will have a policy
applied to them that causes the password screen saver to come up
after 4 minutes. This is to prevent someone from coming behind us if
we are working on several machines. Now for the actual desktop i am
working from, this is actually preferable. But for those of us
system admins on 5 or 6 terminal server (remote admin actually)
sessions, having those session lock, too, is quite annoying.

So i am trying to develop a way to have policy apply only to real
direct connections and not to the myriad terminal server sessions i
use on a day to day basis.
.

Relevant Pages

  • Re: Using Group Policy to give install permission
    ... Group Policy is simply (well, ... Active Directory there is only one Organizational Unit: ... Your user account objects or computer account objects must directly reside ... in the Organizational Unit to which you linked the GPO. ...
    (microsoft.public.win2000.group_policy)
  • Re: Terminal Server GPO Issue
    ... The name of the OU where the GPOs should not be applied is: Citrix XP ... They both sit at the same level under an OU called Servers. ... Microsoft Windows Operating System Group Policy Result tool v2.0 ... Sharepoint Auth GPO ...
    (microsoft.public.windows.server.active_directory)
  • Re: policy for only two computers
    ... a setting in a Domain-linked GPO then the setting in the Domain-linked GPO ... what happens if there are conflicting settings at the same level? ... go to the Group Policy tab and click on the New... ... the Computer Configuration half and the User Configuration ...
    (microsoft.public.win2000.group_policy)
  • Re: Getting desperate: GPO applying incorrectly, PLEASE HELP ME!!
    ... GPO security settings from the defauts. ... Restart the workstation computer and the Terminal server, ... I've chosen these settings only because the affect is easy to observe. ... add check mark in the Deny column for Apply Group Policy ...
    (microsoft.public.windows.group_policy)
  • Re: GPO not applying over VPN -- Tried everything.
    ... The GPO is linked to a folder redirection OU that the user is in. ... Group Policy Management solutions at http://www.sdmsoftware.com ... Small Business Server Domain Password Policy ... Filtering: Denied ...
    (microsoft.public.windows.group_policy)