User has to be in OU for policy to apply

[Kevin]

I have a group policy setup for a terminal server in it's own OU. I want
This policy to apply to a user when they login to the TS, but not when they
log into their own PC. I created a security group placed the user(s) in this
group, appplied the policy to that group (read and apply, not denying
anyone)

I have OU's for the different departments and they work fine, but the users
are all located underneath the OU for which the policy is linked. For some
reason the Policy in my TS OU will only apply if I move a user to the TS OU.
I can't have a user in two different OUs so I'm not sure what to do. I hope
that makes sense.

Any help would be appreciated!

Kevin

 

[Andrew Mitchell]

I have a group policy setup for a terminal server in it's own OU. I want
This policy to apply to a user when they login to the TS, but not when
they log into their own PC. I created a security group placed the
user(s) in this group, appplied the policy to that group (read and
apply, not denying anyone)

I have OU's for the different departments and they work fine, but the
users are all located underneath the OU for which the policy is linked.
For some reason the Policy in my TS OU will only apply if I move a user
to the TS OU. I can't have a user in two different OUs so I'm not sure
what to do. I hope that makes sense.

You need to set the GPO in the terminal services OU as a loopback policy.
This will cause all settings (including User settings) to be applied, even
though only computers exist in the OU.

http://support.microsoft.com/default.aspx?scid=kb;EN-US;231287

Andy.

 

[Kevin]

I turned on the loopback policy, but it's still not working. I'm not sure
what's going on???

Thanks
Kevin