Terminal Server and Local Policies

[Albert]

I have a Windows 2000 Server working as Terminal Server, and other two Windows 2000 Server as DC.
All LAN clients are created in AD, and connect to Terminal Server via RDP.

I want the clients logon against domain, but group policy applied to the user groups are very
rectrictive, because in Terminal Server they must have rights to execute ERP only, but
when they are logging into local machine, they must have Administrator rights.

How I can do this? I tried to configure with Terminal Server profile and Local profile, but
the group is the same, and group policy is applied not only in Terminal Server but also Local.

A person talk to me about WMI filters, but it seems no way to success...

Any idea?

Thanks

 

[Florian Frommherz [MVP]]

Howdie!

I have a Windows 2000 Server working as Terminal Server, and other two Windows 2000 Server as DC.
All LAN clients are created in AD, and connect to Terminal Server via RDP.

I want the clients logon against domain, but group policy applied to the user groups are very
rectrictive, because in Terminal Server they must have rights to execute ERP only, but
when they are logging into local machine, they must have Administrator rights.

You're working with Loopback Processing Mode, right? Have a look at this:
http://www.frickelsoft.net/blog/?p=63

cheers,

Florian