assign GPO to the terminal server only.

[Guest]

I'm trying to assign a GPO to the terminal server only instead of the entire domain. Administrators should not be not affected. I can't figure out how to do this using a local policy. How do I do this

thanks in advance..

Hiroshi Jacob

p.s. using server 2003

 

[Alan Sterling \(MSFT\)]

Hiroshi,

260370 How to Apply Group Policy Objects to Terminal Services Servers
http://support.microsoft.com/?id=260370


The first option is to create an organizational unit (OU) specifically for
the Terminal Services servers in Application Server mode. This OU allows
specific GPOs to be applied to only those Terminal Services computers,
creating a tightly controlled Terminal Services experience for the users
without affecting the other servers in the Active Directory domain. This OU
should not contain users or other computers; therefore domain administrators
can fine-tune the Terminal Services experience. The OU can also be delegated
for control to subordinate groups such as server operators or individual
users.


--
Alan Sterling---MCSE
Windows 2000 Directory Services
English - This posting is provided "AS IS" with no warranties, and confers
no rights. OR if you wish to include a script sample in your post please add
"Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm"

I'm trying to assign a GPO to the terminal server only instead of the

entire domain. Administrators should not be not affected. I can't figure
out how to do this using a local policy. How do I do this?

 

[Guest]

Alan,

I've already tried this, it didn't seem to work...

 

[Robert Greene [MSFT]]

Hi Hiroshi,

You cannot do contditional Group Policies via Local Group Policies on a
server. Local Group Policies affect all users that logon to the server.

If you want to apply a policy to only certain users or all users except a
certain group of users you have to use Group Policies within Active
Directory Users and Computers.

I'm trying to assign a GPO to the terminal server only instead of the

entire domain. Administrators should not be not affected. I can't figure
out how to do this using a local policy. How do I do this?