TS Policies, pse help

[OL]

Hello,

I need help for a particular configuration ?

Some users logs in the domain under their username, with some roaming
profiles

Same users also access to a terminal server to run server based
environment apps (Office, etc?)

I want to apply a policy to reduce the terminal server environment (Ex.
Remove shutdown menu, avoid use of IE, etc?)

This is easy to do, but the problem is that the policy also apply to
their desktop, and I want this policy apply only to the TS

So is it possible to apply a policy to same users that only affect the
terminal server side ?

Any solution welcome!

Best regards,

OL .:

 

[Michael Holzemer]

Hello,

I need help for a particular configuration ?

Some users logs in the domain under their username, with some roaming
profiles

Same users also access to a terminal server to run server based
environment apps (Office, etc?)

I want to apply a policy to reduce the terminal server environment
(Ex. Remove shutdown menu, avoid use of IE, etc?)

This is easy to do, but the problem is that the policy also apply to
their desktop, and I want this policy apply only to the TS

So is it possible to apply a policy to same users that only affect the
terminal server side ?

Any solution welcome!

Best regards,

OL .:

Put the Terminal Servers in their own OU and apply your policy to that OU.
The Policy must include Loopback Processing. This will ensure policy will
apply to the users only when they log onto machines in that OU.
See this
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/gp/34.asp

and

http://support.microsoft.com/default.aspx?kbid=231287

--
Regards,

Michael Holzemer
No email replies please - reply in newsgroup

Learn script faster by searching here
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/scriptcenter/default.asp

 

[Ulf B. Simon-Weidner]

Hello,

I need help for a particular configuration ?

Some users logs in the domain under their username, with some roaming
profiles

Same users also access to a terminal server to run server based
environment apps (Office, etc?)

I want to apply a policy to reduce the terminal server environment (Ex.
Remove shutdown menu, avoid use of IE, etc?)

This is easy to do, but the problem is that the policy also apply to
their desktop, and I want this policy apply only to the TS

So is it possible to apply a policy to same users that only affect the
terminal server side ?

Any solution welcome!

Best regards,

OL .:

Hello OL,

you'll need to link the Group Policy to the OU where the Terminal Server is,
don't link it to the OU where the Users are.

Normaly the user-part of a policy which applies to a computer is not applied.
However for szenarious like yours there's the loopback mode of the GPO, which
will apply the user-part of the computers policies.

Look at the following Article:

231287 Loopback Processing of Group Policy
http://support.microsoft.com/?id=231287

Gruesse - Sincerely,

Ulf B. Simon-Weidner

 

[OL]

Hello Michael,

The problem is that when I apply the policy in this way, it also apply
to the administrator when I Log locally to the server ...

Can I exclude admin group to not receive policy ?


Best regards,


OL

"Michael Holzemer" a exposé le 21.01.2004 :

 

[Ulf B. Simon-Weidner]

Hello Michael,

The problem is that when I apply the policy in this way, it also apply
to the administrator when I Log locally to the server ...

Can I exclude admin group to not receive policy ?


Best regards,


OL

Hello OL,

sure - you can adjust the permissions on the GPO and do not allow the admins
group to appy the GPO.

Gruesse - Sincerely,

Ulf B. Simon-Weidner