Re: Creating a GPO for TS lockdown

You should *not* add any user accounts to the OU. You need to use
loopback processing of the GPO instead.

You can use the Resultant Set of Policies (RSoP) feature to check
which GPOs apply to a certain user when logging into your TS.

260370 - How to Apply Group Policy Objects to Terminal Services
Servers
http://support.microsoft.com/?kbid=260370

231287 - Loopback Processing of Group Policy
http://support.microsoft.com/?kbid=231287
_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

=?Utf-8?B?Tm9uY2VudHozMDM=?=
<Noncentz303@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote on 25 okt 2007 in
microsoft.public.windows.terminal_services:

Currently I am using GPMC to do my GPO, I like how it lays
everything out for you. Man that last post was insane sorry bout
that.

I guess what im looking for is to see if my gpo is actually
affecting the server. Under my new GPO I added the Terminal
Server and the user group I set up. Then I added a user to that
group to use as a test subject. but when I log onto the server I
do not see any changes as well as foler redirection.

I set up mandatory profiles for our users when logging on
because im trying to get it so that users cannot make changes to
the TS but all be in the same enviorment?

Noncentz

"leakim" wrote:

Hello Antony,

GPMC is a good tool from ms to help creating an resolve gpo
issues :
http://www.microsoft.com/downloads/details.aspx?displaylang=en&F
amilyID=0a6d4c24-8cbd-4b35-9272-dd3cbfc81887


"Noncentz303" <Noncentz303@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
message
news:6CAB3181-01BB-41BC-B658-3125CEF7EB4F@xxxxxxxxxxxxxxxx
I created a test OU and added a GPO to lockdown TS. I added
each TS to the OU
and also a test user was added to the group. But when I go to
test my TS to
see if the changes I made are working it seems as though my
GPO never worked
at all.

Does anyone have a link to a tuturial that can accurately
help me create a GPO for my TS so that all users sessions are
the same

I was using:

http://technet2.microsoft.com/windowsserver/en/library/7b33dcd
6-0ad2-44e8-82f8-962425b6cf8e1033.mspx?mfr=true

Thanks Much
Antony
.

Relevant Pages

  • Re: Getting desperate: GPO applying incorrectly, PLEASE HELP ME!!
    ... GPO security settings from the defauts. ... Restart the workstation computer and the Terminal server, ... I've chosen these settings only because the affect is easy to observe. ... add check mark in the Deny column for Apply Group Policy ...
    (microsoft.public.windows.group_policy)
  • Re: User Profiles
    ... Windows Server 2003. ... effects of another GPO, ... the shared folder - enabled various other settings - enabled GPO ... 231287 - Loopback Processing of Group Policy ...
    (microsoft.public.windows.terminal_services)
  • Re: GPO delivered User rights for unique local account.
    ... You do not need to install adminpak to alter GPO settings, ... If you were to use gpedit (as from an adminpak install) on a XP Pro at SP2 ... For server A you now need LocalAccountA1 in a certain user right. ... local group policy or if one used uniformly named machine local ...
    (microsoft.public.win2000.security)
  • Re: Group Policy to control custom server application
    ... You'll be hard-pressed to do this via GPO. ... There is no remote notification mechanism in Group Policy that you can rely on. ... I don't see how you can let the server app know that the client has logged on without some kind of event-based notification communication between client and server. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Unable to save GPO edits in Windows 2003 Small Bussiness Serve
    ... I am able to create GPO's on my test server and edit them as ... to delete the GPO at the very least. ... Group Policy Management "The server is unwilling to process the request" ...
    (microsoft.public.windows.server.sbs)