loopback processing help

[jeff]

I have read previous post on this and still haven't been able to solve a
group policy problem?
Here is my setup:
1 windows 2000 server (DC - in remote administration mode)
1 windows XP Pro workstation joined to domain (named teststation)

I have setup a user called "teststation" and gave it admin rights so it can
log onto server remotely in remote admin mode. I just want to remove the
shutdown command from the teststation user when he logs into 2000 server via
terminal session. Right now it works fine when he logs in remotely to
terminal session, but the local workstation "teststation" also removes the
shutdown command from its desktop???? Could someone please give me the
steps to solve this puzzle?

thanks
jeff

 

[Chriss3]

Change Security Permissions for your GPO
Deny Read and Apply Policy of for the computer object TESTATION

 

[Bobby McMillan [MSFT]]

Here is what you will want to do:

1) On the Domain Controllers OU, Create a new Policy (named "No Shutdown")
2) In the "No Shutdown" policy, make the changes that you need including
loopback processing
3) Get out of the policy editor.
4) Select the "No Shutdown" policy and go to properties -> secuity
5) Only give the teststation user and the DC's account apply permissions.
(no one else should have it)

At this point, the testation user will not be able to shutdown the Server
from a Terminal session or at the console.

This works because Loopback will appy to the DC and only teststation will
be the user that can apply the settings.



This posting is provided "AS IS" with no warranties, and confers no rights.