Logon script issues

[Guest]

Hi Al

We are currently looking into setting up a terminal services application server. As a tect we're using one of our w2k servers with our CADD package on it. The reason we're doing this is so that people in office a can work on office b drawings (connected via 256k vpn, but the connection is far to slow to work on the drawings directly)

My Questions
Is there a way to set it up so that when a user from office A logs onto the TS in office B they only get the TS's local logon script and not the logon script assigned to them in Active directory ? At the min, both scripts are running

Is there a way so that when the user in office A logs onto the TS in office B they only get assess to their local printers, not the TS's local printers

I hope this questions are clear, if u need any more info please let me know. I look forward to any responses, and any more advice on the topic

Best regard
GerryR

 

[Vera Noest [MVP]]

comments inline

Hi All

We are currently looking into setting up a terminal services
application server. As a tect we're using one of our w2k
servers with our CADD package on it. The reason we're doing
this is so that people in office a can work on office b drawings
(connected via 256k vpn, but the connection is far to slow to
work on the drawings directly).

I don't know how many concurrent connections you are going to run
over this line, but my guess is that it will still be slow. CADD
is not a good application to run on a TS, since it is so graphic
intensive, and the screen needs to be redrawn all the time.

My Questions:
Is there a way to set it up so that when a user from office A
logs onto the TS in office B they only get the TS's local logon
script and not the logon script assigned to them in Active
directory ? At the min, both scripts are running.

The basics here are:
* put your TS in a separate OU
* block inheritance of GPOs to avoid inheriting the normal login
script
* define a TS-specific GPO, including your TS-specific login
script
* use loopback processing with "replace" in this GPO

Details can be found here:
260370 - How to Apply Group Policy Objects to Terminal Services
Servers
http://support.microsoft.com/?kbid=260370

231287 - Loopback Processing of Group Policy
http://support.microsoft.com/?kbid=231287

Is there a way so that when the user in office A logs onto the
TS in office B they only get assess to their local printers, not
the TS's local printers ?

If your users should get any local printers on the TS, why install
any? Can't you change the permissions on the TS-local printers?

I hope this questions are clear, if u need any more info please
let me know. I look forward to any responses, and any more
advice on the topic.

Best regards
GerryR

Hope this helps,

 

[Ron Oglesby [MVP]]

That works if the Login script is specified at the GPO level. If you have
user attribute login scripts specified those will still run.

Anyway try editing your primary login script and polling for the
%computername% in it. If it ='s your TS server end the script OR jump to the
section you want in the script OR call a TS specific script etc etc Get it?

Also if your environment is bigger thatn a couple TS servers you can change
from a computer name and just look to see if the user is logging in from a
session by checking the SessionID. And Finally if you need to distinguish
between servers in two locations you can set up Env. Variables on the
servers themselves and parse for them, Such as:

Terminal_Server=True
TS_Location=SiteB

Now in the script you just do a IF Terminal_Server="True" and blah blah
blah,,, get it?