Set Mandatory Profile for all Terminal Server Users?

[Guest]

Does anyone know if there's a way to set a Mandatory Profile at the server level or at the OU level of the OU the server is in? I'm trying to assign a Mandatory Profile to all users who logon to a particular Terminal Server. I'd rather not set this per user in Active Directory. Thanks

Stev

 

[Greg Lirette [MS]]

There is already a group policy in Windows 2003 to do this, are you running
Windows 2000 or Windows 2003?


This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Greg Lirette [MS]]

Sure here you go

In Windows 2003 a group policy is available which should be used if you
need to configure a separate home directory dependent on the server being
used. This can be configured in an Active Directory group policy or in a
local policy on the Windows 2003 Terminal Services computer.



The TS user home directory policy is found in Windows 2003 under Computer
Configuration\Administrative Templates\Windows Components\Terminal Services




This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Greg Lirette [MS]]

I see your concern and tend to agree with you, you could do this of course
in the user account since it doesn't append the username. I'm researching
this as I think it warrents some discussion.

What is your current solution?

This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Greg Lirette [MS]]

My post has a typo I meant to say profile policy not home drive policy.

This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Guest]

Currently, each user in Active Directory has a Terminal Services Profile Path set to the same mandatory profile. We only have one Terminal Server now, so it's not a major issue. But we're planning to expand and put more servers in. These are being used for public workstations, but a user must have an account in Active Directory to logon. They are able to get into their home directory and Outlook automatically configures based on their username. Locking down the session with group policy wasn't enough as we needed to use a mandatory profile for special preset software configurations. And, eventually, we're going to need to set a different profile for different groups of Terminal Servers. And I can see how it would be nice to set this in group policy and set it so that when users logon to a Terminal Server in a particular OU, members of one group could get one mandatory profile, and members of another group could get a different mandatory profile

I've been scratching my head on this one.
Thanks


----- "Greg Lirette [MS]" wrote: ----



I see your concern and tend to agree with you, you could do this of course
in the user account since it doesn't append the username. I'm researching
this as I think it warrents some discussion

What is your current solution

This posting is provided "AS IS" with no warranties, and confers no rights

 

[Greg Lirette [MSFT]]

I don't think we are going to have a good solution for you other than to
use the user account properties. This would not give the ability to allow
a signle user to have a different home folder depending on the server being
used.

This posting is provided "AS IS" with no warranties, and confers no rights.