Re: TS and Non TS working

Yes, set Deny for Apply this GPO.

816100 - How To Prevent Domain Group Policies from Applying to
Administrator Accounts and Selected Users in Windows Server 2003
http://support.microsoft.com/?kbid=816100

_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

=?Utf-8?B?S3Jpc3RpbiBMLiBHcmlmZmlu?=
<KristinLGriffin@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote on 21 maj 2008
in microsoft.public.windows.terminal_services:

What about setting DENY for domain admins for the Advanced
delegation settings on the policy?

"Mike K" wrote:

Hi Vera,
Excellent -that works nicely thanks.... the only drawback I can
see is that when I login under the Administrator account the
policies are still applying - is there any way around this
other than moving the TS from the OU? Thanks,
Mike

"Vera Noest [MVP]" wrote:

Yes, loopback processing solves this problem.
Link the restrictive GPO to the OU which contains the TS
computer account.

231287 - Loopback Processing of Group Policy
http://support.microsoft.com/?kbid=231287

_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

=?Utf-8?B?TWlrZSBL?= <MikeK@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote
on 21 maj 2008 in microsoft.public.windows.terminal_services:

Hi all,

I've created a new TS 2008 environment for several hundred
users. The TS side of things works really well with Group
Policies and TS Profile paths doing most of the work.

I now have a major problem. Users now want to use laptops
in some parts of the business. Because all the group
policies are running against the users, when they login
using their usual name on to a laptop it pretty much
cripples the machine!

Is there a way around this i.e. loopback processing etc?

Any help greatly appreciated.
Mike
.

Relevant Pages

  • Re: Policies having no effect on XP workstation
    ... If the nothing else is define yes the changes are made at the server holding ... If you check the GUID of the particular GPO object you can see if a such ... Also, the initial change is made to the PDC emulator DC, so it ... >> to the W2K3 server the policies started working. ...
    (microsoft.public.windows.group_policy)
  • RE: Computer Policy Not applied
    ... Have you run RSoP from the server side to validate the ... asynchronous application of the GPO is failing. ... > I cannot seem to get computer policy to work through our group policies. ...
    (microsoft.public.windows.server.active_directory)
  • Re: TS and Non TS working
    ... Administrator Accounts and Selected Users in Windows Server 2003 ... MCSE, CCEA, Microsoft MVP - Terminal Server ... policies are still applying - is there any way around this ... Is there a way around this i.e. loopback processing etc? ...
    (microsoft.public.windows.terminal_services)
  • Re: Accessing Windows 2000 Server Remote Registry
    ... On the inaccessible W2K Member Server, ... Also all of the Secure Channel policies are disabled both locally ... and via GPO. ... > Take a look at a couple settings first on the inaccessible W2k: ...
    (microsoft.public.win2000.security)
  • Re: AD Cant restrict access to server
    ... I then ran gpupdate on the server that the policies were ... > if you wish to include a script sample in your post please add "Use of the ... I created a new GPO, put it at the top of the order. ...
    (microsoft.public.windows.server.active_directory)