Security Groups and Mandatory Profiles...

[Guest]

I am attempting to set up mandatory profiles on a Windows 2003 Terminal
Server. The problem is that it only seems to work correctly when I have
Remote Users included in the Local Administrators group, given this group of
users, they will down the server in a number of hours... I haven't applied
any GPOs yet and the terminal server should still be as 'Out of the Box' as
it could be. I have defined the Mandatory Profile and shared it out,
specifying it in the 'Terminal Server Profiles' tab. What doesn't seem to be
working is that I tailored the profile to include My Computer, Network
Neighborhood and 1 shortcut on the desktop. But as non-administrator's it
all disappears...

Thanks,
Ben

 

[Vera Noest [MVP]]

Have you checked that the shortcut is located on the "All users"
desktop, and not on the Administrators desktop?

As with all permission problems, I would download FileMon and
RegMon from http://www.sysinternals.com/. Run them as
administrator and start a TS session as a normal user.

FileMon and RegMon will show you all "access denied" errors
that occur, which will probably show you immediately where the
problem lies.