Group Policy to apply only to one computer..with many users..

[Scott Irwin]

I need to setup GPO so that when a user logs into a Terminal Server from
home...they receive a fully locked down desktop...but when they log into
their local desktop.. that it does not lock up with group policy.

I do not want to use Local Policy to lock the Terminal Server computer
down..but rather use GPO by group.

We currently have it set by different department group...however.. it locks
the people up on their main workstation when they log in at work.

any thoughts...

 

[Chriss3]

Hi Scott, use the User Group Policy loopback processing mode...

How to Lock Down a Windows 2000 Terminal Server Session:
http://support.microsoft.com/default.aspx?scid=kb;en-us;278295

--
Regards,

Christoffer Andersson
No email replies please - reply in the newsgroup
If the information was help full, you can let me know at:
http://www.itsystem.se/employers.asp?ID=1

 

[Scott Irwin]

Thanks Chris..

I already have a policy very similar to this... even more restrictive ...
however... wehn you drop a user under the hierarchy of this policy... it
locks them up in the entire domain... as the user object sits below the
GPO.. Do you know if the loopback processing mode only applies to a
computer running Terminal Services ?

My goal is to have an accounting user.. login from home to a TS machine..
get locked down... but not be locked down when the sit at thier computer...
the TS server and desktop are in the same AD Tree... I thought about
defining the TS in a different domain... with separate users.. that would
take care of it.. but its a huge pain in the @ss ..

Thanks for the help

 

[Scott Irwin]

We are actually no.. moving users inot a GPO policy OU.. logging them into
the TS and creating the locked down profile... then moving them back to the
orginal location... with a GPO ,.. leaving the locked down version of
profile on the TS desktop .. and the unlocked down verion on the main
desktop..

There has to be an easier way ..

 

[Chriss3]

Hello, You have to place the particular TS Server with in a OU and apply the
Policy to that particular OU. Loop Back Processing will only take place for
computer objects under that OU, Loop Back Processing will work on Windows
2000 and Windows XP , as well the Server Versions.

--
Regards,

Christoffer Andersson
No email replies please - reply in the newsgroup
If the information was help full, you can let me know at:
http://www.itsystem.se/employers.asp?ID=1