Terminal Services Policy

[Guest]

Hello

Is tgere a way to make group policy that will only apply when logging to Terminal Server
No matter who is logging on

For example
When user logon normally (not to TS) some Group policy objects are applied to him
when the same user logon to TS other Policy objects are applied and some settings are different than as he logon normally.

Thanks.

 

[Guest]

If I understand right, the best way is to:
- create seperate OU for TS machine,
- in this OU create GPO with various user and computer configuration, also enable Loopback Processing of Group Policy
- Apply GPO to TS machine only

Is that correct ?

 

[Vera Noest [MVP]]

Yes, that's correct.
Technically, you link the GPO to the OU, but since the TS machine is
the only computer in that OU (don't put your users or clients there),
it applies to your TS machine only.

 

[Guest]

Ok, but I still have problem with user configuration in this GPO
The settings from user configuration seemed not working

Should this TS GPO be applied to ALL Authenticated users or to Terminal server computer account ?

 

[Vera Noest [MVP]]

To all Authenticated Users, but be sure to "Deny" the right to "Apply
this policy" for Administrators, otherwise you are locking your own
session down as well.