Applying Group Policies

[Ryan]

Hello,

I was wondering if this is possible: I have a couple of terminal servers
that my users log on to for applications. Now what I have done is this:
- <Policy A> created a "locked" group policy that only applies to the
terminal server (so they can't mess it up).
- <Policy B> created another policy for their desktop machines.

Now how do I apply the group policies so that when they logon to their
desktop machine they get and apply "Policy B". Then when they logon to a
terminal server they get "Policy A".

Here is an example of my AD Structure:
- Domain
- Group A (OU)
- Users (OU)
- John Doe (User Object)
- Computers (OU)
- JohnDoe (Computer Object)

- Group B (OU)
- Users (OU)
- Herb Doe (User Object)
- Computers (OU)
- HerbDoe (Computer Object)
- Servers (OU)
- Terminal Servers (OU)
- TS1 (Computer Object)
- TS2 (Computer Object)

Thanks,

Ryan

 

[Kapil Mehra [MSFT]]

Hi Ryan,

You can accomplish this using loopback processing of group policy. The
following KB articles should explain how to set this up:

231287 Loopback Processing of Group Policy
http://support.microsoft.com/?id=231287

260370 How to Apply Group Policy Objects to Terminal Services Servers
http://support.microsoft.com/?id=260370

278295 How to Lock Down a Windows 2000 Terminal Server Session
http://support.microsoft.com/?id=278295

Kapil Mehra, MSFT
"Please do not send e-mail directly to this alias.
This alias is for newsgroup purposes only."