Policies not working

I have a 2000 Term services server. I have basically went over article 278295.

Created ou. moved server into new ou. created policy. added user group and
even user to policy. Still log on with full rights.

Any help is appreciated.

Create OU
Creat Policy linked to OU
Enable Loopback Policy Processing with Replace option.
Move TS into OU
Apply Policy to Authenticated Users and TS Computer Object
Deny Apply Policy to Administrators
Force Policy Refresh or reboot server.

Patrick Rouse
Microsoft MVP - Terminal Server
http://www.workthin.com


"Wayne_Turner" wrote:

> I have a 2000 Term services server. I have basically went over article 278295.
>
> Created ou. moved server into new ou. created policy. added user group and
> even user to policy. Still log on with full rights.
>
> Any help is appreciated.

I had a similar problem and found this article useful; it applies to win
2003 but I know there's an equivalent utility for 2000 (I had never done
much with GPOs and didn't know about the background propagation, if you know
about it I guess this won't help).

http://support.microsoft.com/defaul...kb;en-us;298444

"Wayne_Turner" <WayneTurner@discussions.microsoft.com> wrote in message
news:343F7C41-0425-41C3-AA8E-1393ED5CE407@microsoft.com...
> I have a 2000 Term services server. I have basically went over article
278295.
>
> Created ou. moved server into new ou. created policy. added user group and
> even user to policy. Still log on with full rights.
>
> Any help is appreciated.

The 2000 equivalent is "secedit".

"Patrick Rouse" wrote:

> Create OU
> Creat Policy linked to OU
> Enable Loopback Policy Processing with Replace option.
> Move TS into OU
> Apply Policy to Authenticated Users and TS Computer Object
> Deny Apply Policy to Administrators
> Force Policy Refresh or reboot server.
>
> Patrick Rouse
> Microsoft MVP - Terminal Server
> http://www.workthin.com
>
>
> "Wayne_Turner" wrote:
>
> > I have a 2000 Term services server. I have basically went over article 278295.
> >
> > Created ou. moved server into new ou. created policy. added user group and
> > even user to policy. Still log on with full rights.
> >
> > Any help is appreciated.