Group Policy

[Tracy H.]

Hello -

I recently installed terminal services on a Win2K SP3
server and I'm having difficulty with group policies not
working correctly. I have all TS users in one OU and a
group policy applied. The policy only works for one
user. I have tried deleting and recreating the users
based on the one user that the policy works for, but it
hasn't helped.

Thanks for your help

Tracy H.

 

[Vera Noest [MVP]]

GPOs for Terminal Servers should normally be applied to the OU
that the Terminal Server is in, not the users. Also use loopback
processing of the GPO, with the "Replace" option.

260370 - How to Apply Group Policy Objects to Terminal Services
Servers
http://support.microsoft.com/?kbid=260370

231287 - Loopback Processing of Group Policy
http://support.microsoft.com/?kbid=231287

 

[Guest]

My terminal server and DC are the same machine and that
was why I was trying to get the policy to work on the
users OU. Is this possible? So far, I've had no luck.

Tracy H.

-----Original Message-----
GPOs for Terminal Servers should normally be applied to the OU
that the Terminal Server is in, not the users. Also use loopback
processing of the GPO, with the "Replace" option.

260370 - How to Apply Group Policy Objects to Terminal Services
Servers
http://support.microsoft.com/?kbid=260370

231287 - Loopback Processing of Group Policy
http://support.microsoft.com/?kbid=231287

--
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
http://hem.fyristorg.com/vera/IT
--- please respond in newsgroup, NOT by private email -- -

"Tracy H." <[email protected]> wrote

Hello -

I recently installed terminal services on a Win2K SP3
server and I'm having difficulty with group policies not
working correctly. I have all TS users in one OU and a
group policy applied. The policy only works for one
user. I have tried deleting and recreating the users
based on the one user that the policy works for, but it
hasn't helped.

Thanks for your help

Tracy H.

.
[/QUOTE]

 

[Vera Noest [MVP]]

The user settings in the policy should affect the users. The main
problem is that they will also affect the users when they log in
to their client computer. I.e: you cannot lock down the Terminal
Server without also locking down the clients. That's one of the
reasons that this setup is not recommended.

Have you checked the resultant set of policies? Have you checked
the EventLog? And the security settings of the GPO? The single
user who is currently affected by your GPO, how is he different
from all other users? Domain Administrator?

--
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
http://hem.fyristorg.com/vera/IT
--- please respond in newsgroup, NOT by private email ---

My terminal server and DC are the same machine and that
was why I was trying to get the policy to work on the
users OU. Is this possible? So far, I've had no luck.

Tracy H.

[/QUOTE]