Re: OU GPO - Problem setting TS Profile Path for users under a spe

That sounds like a wise decision to me!

_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

=?Utf-8?B?ZHVkZURhZA==?= <dudeDad@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote
on 27 apr 2008 in microsoft.public.windows.terminal_services:

Vera:

So after thinking about my strategy again, your comments made me
realize a few things.... that has helped me to resolve my
difficulties.

Basically, I changed my opinion as to if I really needed a
different mandatory profile for each group of users. I decided
to that i could "go with the flow" and use a single mandatory
profile for all users on the TS in order to get the "no saved
data/no saved state" functionality. I then will implement the
other more fine grained functionality I was hoping to do with
specific profiles, by using other methods... mostly (hopefly)
GPOs and perhaps sone regedits


Thanks

"dudeDad" wrote:



"Vera Noest [MVP]" wrote:
>
Yes, the behaviour that you describe is by design.
That's how settings in GPOs are applied. When a user logs on
to a computer (be it a workstation or a TS) the following
settings apply (without loopback processing):
1. the Computer Configuration settings from the GPO linked to
the OU which contains the computer account
2. the User Configuration settings from the GPO linked to the
OU which contains the user account


Yes, I get that... (and am resigned to that fact :-) )

I am now trying to figure out how to "skin the cat" a different
way.

Basically, I want to use Active Directory to make a group of
users act as if I manually went into each of their user
properties and manually configured the Terminal Server Profile
Tab's Terminal Server Profile Path/Set Path"

Right now, the only thing I can think of is setting a GPO at
the "user OU" level that makes a login script run that somehow
automagically sets that user to mandatory profile. At the
moment , I don't know how to write that script.

Any thoughts on the script? Or other ways to skin the cat?

Regards

Ken

(btw as an aside, I got the "run program with desktop behind
it" behavior I wanted by using the userconfig setting "run
program at login" rather than the conputer config "run program
at connection)
.

Relevant Pages

  • Re: Help with configuration
    ... OK, so your GPO is working now, good! ... local profile, both on their clients and on the TS. ... account profile is blank, also). ... Your GPO settings do not apply to your Terminal Server. ...
    (microsoft.public.windows.terminal_services)
  • Re: 2003 Terminal Server Profiles How too..
    ... I moved the Terminal Server Computer object into the OU. ... If both settings are configured, ... Then use Folder redirection to redirect the Desktop folder ... Within the test user under Terminal Services Profile ...
    (microsoft.public.windows.terminal_services)
  • Re: GPO problems
    ... OK I understand Loopback, I don't think it will help. ... I have a Terminal Server user within his own seperate OU ... with his own GPO assigned to it. ... therefore no conflicting GPO settings. ...
    (microsoft.public.windows.group_policy)
  • Re: Help with configuration
    ... But now, aside from that, it is not applying any of the settings ... created the GPO on the 2000 server originally. ... I have the Terminal Server computer object in the security ... the domain account profile is blank, ...
    (microsoft.public.windows.terminal_services)
  • Re: Help with configuration
    ... I will specify it on the folder redirect in the GPO. ... But now, aside from that, it is not applying any of the settings again! ... I have the Terminal Server computer object in the security list of the ... domain account profile is blank, ...
    (microsoft.public.windows.terminal_services)
Loading