RE: Mandatory TS user profiles... Admin rights

Ahh the sweet smell of sorta success :)

I enabled the GPO and I definetly saw changes:

The configurations that I enabled for my TSLockdown GPO "Computer
Configuration" took effect immediately. ex. I enabled a program to run on
startup and it work no problem

Im assuming since it was a computer setting no matter who I log in as on
that TS it will enable the "computer Configuration" from my GPO... thats
fine, I will probably setup another GPO to hande admin users

But with "User Configuration" I dont see the changes that I set in my
Lockdown GPO. Such as hiding drives and getting rid of the shutdown icon.
This is making it hard for me to see if the group I setup is actually working
correctly.

Do some of these settings require a restart?

"cendrars" wrote:

You are on your way Grasshopper!

Let us know how you make out! Good luck!

"Noncentz303" wrote:

The lowdown- I have been tasked with setting up our TS enviorment so that
when a user logs on they have limited access to the desktop and startbar.
From what I have read this can be accomplished with TS user profiles.

We have a SBS and 2 TS "TS1 and TS2"

I am new at this but this is what i have accomplished so far:

I created a new GPO and a new OU for TS1 and 2
-I created a shared folder on TS1 called TSProfiles
-I created a test user and added it to the new GPO
-I enabled loopback processing
-I enabled admin security group to roaming profiles
-Set the path for TS roaming profiles :\\TS1\TSProfiles * appends username

Then I went to my test user and specified the following profile path:
\\TS1\TSProfile\%username%

- This is where I run into my issues. When I log in a seperate folder is
created in my share for each user. I would like to use 1 standard profile for
all users when they log in so that when I make changes the effect all users.

- Also when I log in as admin I cannot view the contents of the folders
because access is denied -- even though I have it set to add user admin when
folder is created

- I also am wondering will I have to set up a static path for every user
depending on what TS they use and specify different paths and redirects for
both servers?

Any help would be appreciated
Antony
.

Relevant Pages

  • Re: DNS configuration
    ... That's a good reason to use folder redirection. ... Application Data, and Desktop, in a custom GPO, linked at the MyBusiness ... Keep your profiles tinytinytiny! ... Profiles\single domain user folders: the same as yours: ...
    (microsoft.public.windows.server.sbs)
  • Re: GPO Problems
    ... The computer configuration part belongs to computers and the user configuration part to the user, so depending on the settings you must have the accounts located there. ... If rsop.msc or gpresult /v logged on with a user account doesn't give any output there can be additional problems with GPO applying belomging to DNS confgiruration or slow links between sites. ... Only the password policy an account lockout policy have to bet set on ...
    (microsoft.public.windows.server.active_directory)
  • Re: Computer componet of GP not being applied
    ... When you open the GPO for editing, ... Configuration and User Configuration. ... >> If you look at the properties of the OU in which the Terminal Server ... >>> It all seems to be linked to the local user groups on the terminal ...
    (microsoft.public.windows.group_policy)
  • Re: Computer componet of GP not being applied
    ... When you open the GPO for editing, ... Configuration and User Configuration. ... >> If you look at the properties of the OU in which the Terminal Server ... >>> It all seems to be linked to the local user groups on the terminal ...
    (microsoft.public.windows.group_policy)
  • Re: Install Windows Patch via GPO
    ... The ip configuration looks ok. ... Windows 2000 IP Configuration ... Ethernet adapter Local Area Connection 1: ... I ran gpresult on the computer and it doesnt show my test GPO. ...
    (microsoft.public.windows.group_policy)