Can a user policy only apply when connecting to terminal?

[Eric]

I admin a 2000 server/pro domain. I use a terminal server
in application mode for a few applications. I created a
shared user account so I can make user configurations in
group policy and not have it apply to their normal user
account.

Is there any way to set it up so that they can log on with
their user account with the restrictions but not have the
restrictions (policy) when they log into their local pcs?

I looked into loopback but it seems that seems to
influence the admin account which needs to continue to
have full access.

 

[Eric]

OK I created the organizational unit with a group policy
with the server in it. I have the apply group policy to
authenticated users, the security group the user is in and
the user. I made the policy have the loopback enabled and
remove desktop icons and windows security from the
settings.

Policy is not taking effect. If I add the user to the
organizational unit then it takes effect when he logs on
the server it works but also when he logs on to his local
pc which I do not want.

Any suggestions?

 

[Guest]

You must move the terminal server computer object to that ou.

/Rickard

 

[Cary Shultz [A.D. MVP]]

Eric,

You M U S T remove the Authenticated Users security group from that GPO and
replace it with the security group that you created - making sure to not
include the Administrator account as well as any other 'admin' user account
object.

You might want to take a look at the following MSKB Article:

http://support.microsoft.com/?id=278295

HTH,

Cary


OK I created the organizational unit with a group policy
with the server in it. I have the apply group policy to
authenticated users, the security group the user is in and
the user. I made the policy have the loopback enabled and
remove desktop icons and windows security from the
settings.

Policy is not taking effect. If I add the user to the
organizational unit then it takes effect when he logs on
the server it works but also when he logs on to his local
pc which I do not want.

Any suggestions?