Terminal Server GPO

[Guest]

I created a seperate OU and put the terminal servers in that OU. I created a
GPO with the group policy loopback. I followed the knowledge base article
260370 and it works for all users. How can administrators be denied getting
this policy when logged onto a terminal server?

 

[Mark Heitbrink [MVP]]

I created a seperate OU and put the terminal servers in that OU. I created a
GPO with the group policy loopback. I followed the knowledge base article
260370 and it works for all users. How can administrators be denied getting
this policy when logged onto a terminal server?

Security Filtering:
Remove Authenticated User and integrate the Terminal Server Accounts
and your desired Security Group

Mark

 

[Guest]

I tried those items and the administrators are still getting the policy. Any
other suggestions?

 

[Mark Heitbrink [MVP]]

I tried those items and the administrators are still getting the policy.
Any other suggestions?

If the administrator still has the permission to apply the gpo, then you
are using a security group where the administrator is a member of.

Mark