policy for terminal

[Keith]

I would like to restrict a user who will terminal in from
home so that they cannot see the local drives of the
server.
However, if I make this change to their group plicy they
are not able to see their local drives when they are in
the office and logged onto their desktop.
Is there a way that a policy can be applied only when
they terminal in?

 

[Ivan Leichtling [MSFT]]

These group policy settings are per machine and NOT per session.
Unfortunately, there is no per session policy for this in windows
today.

I would like to restrict a user who will terminal in from
home so that they cannot see the local drives of the
server.
However, if I make this change to their group plicy they
are not able to see their local drives when they are in
the office and logged onto their desktop.
Is there a way that a policy can be applied only when
they terminal in?

This posting is provided "AS IS" with no warranties, and confers no rights

 

[DJ]

how about a GP restricting the local drives for an OU
containg the treminal server. will then only apply when
connected to it.

 

[Vera Noest [MVP]]

Wouldn't loopback processing of the policy fix this?

260370 - How to Apply Group Policy Objects to Terminal Services
Servers
http://support.microsoft.com/?kbid=260370

231287 - Loopback Processing of Group Policy
http://support.microsoft.com/?kbid=231287

 

[Ivan Leichtling [MSFT]]

No I don't think this will fix the problem.
The issue is that on one computer for one user, you want to have it
both ways - drives hidden and drives displayed. With loopback
processing, to my understanding, you can still only apply policy per
machine or per user.

Wouldn't loopback processing of the policy fix this?

260370 - How to Apply Group Policy Objects to Terminal Services
Servers
http://support.microsoft.com/?kbid=260370

231287 - Loopback Processing of Group Policy
http://support.microsoft.com/?kbid=231287

--
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
http://hem.fyristorg.com/vera/IT
--- please respond in newsgroup ---

This posting is provided "AS IS" with no warranties, and confers no rights

 

[keith]

it isn;t that I want one computer to have it too ways for
a user. just that whatever policy i set applies to their
local XP client machine as well and they need to be able
to see the c drive of their XP client

 

[Ivan Leichtling [MSFT]]

Then I take it back. Vera understood much better than I and proposed
the proper solution.

it isn;t that I want one computer to have it too ways for
a user. just that whatever policy i set applies to their
local XP client machine as well and they need to be able
to see the c drive of their XP client

This posting is provided "AS IS" with no warranties, and confers no rights