RE: Mandatory TS user profiles... Admin rights
- From: Noncentz303 <Noncentz303@xxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Thu, 25 Oct 2007 12:05:18 -0700
Cendrars,
Ok so i figured out my problem with my mandatory profiles. I was just
mapping them incorrectly in AD users and computer. I have the profiles
working like magic now.
But I am having an issue getting my GPO to work on my TS. I created a new OU
and under that I created my new GPO "TS Lockdown". In this GPO I added my TS1
and TS2 along with a test group with users to make sure I wasnt going to down
everyone. I have enabled loopback and a couple other standard limitation to
my GPO but when I log in with one of my test users the TS is basically the
same ... well baring the changes I made in my mandatory profile.
I have been searching all morning for the answer to why my GPO is not
working on my TS but to no avail. I was using this tutorial
http://www.microsoft.com/technet/technetmag/issues/2007/05/TerminalServices/default.aspx
I totally understand what is going on but I just cant seem to get it to work
at all. Any though on what I might be doing wrong??
Noncentz
"cendrars" wrote:
Are you logging on with a local admin account (local to the server, no domain.
affiliation)? Or, are you logging on with a domain account. The difficulty
here is that you have applied Machine GPO settings which are global to the
server.
What is it that you are working to accomplish with your local admin account?
"Noncentz303" wrote:
The lowdown- I have been tasked with setting up our TS enviorment so that
when a user logs on they have limited access to the desktop and startbar.
From what I have read this can be accomplished with TS user profiles.
We have a SBS and 2 TS "TS1 and TS2"
I am new at this but this is what i have accomplished so far:
I created a new GPO and a new OU for TS1 and 2
-I created a shared folder on TS1 called TSProfiles
-I created a test user and added it to the new GPO
-I enabled loopback processing
-I enabled admin security group to roaming profiles
-Set the path for TS roaming profiles :\\TS1\TSProfiles * appends username
Then I went to my test user and specified the following profile path:
\\TS1\TSProfile\%username%
- This is where I run into my issues. When I log in a seperate folder is
created in my share for each user. I would like to use 1 standard profile for
all users when they log in so that when I make changes the effect all users.
- Also when I log in as admin I cannot view the contents of the folders
because access is denied -- even though I have it set to add user admin when
folder is created
- I also am wondering will I have to set up a static path for every user
depending on what TS they use and specify different paths and redirects for
both servers?
Any help would be appreciated
Antony
- Prev by Date: Re: Unable to set a default printer
- Next by Date: Re: W2k3 R2 Terminalserver gets no license...
- Previous by thread: RE: Mandatory TS user profiles... Admin rights
- Next by thread: RE: Mandatory TS user profiles... Admin rights
- Index(es):
Relevant Pages
|
