using group policy on terminal servers

[Guest]

I have a bit of a problem here and need someone that can assist me.

I am running four terminal servers in application mode and need to control
what users can do while logged in a terminal session.

I also would like to control what the users can do on their own workstations
when logged in.

So basically I need separate group policies for the terminal sessions and
for the workstations. For example, I do not want a user to change their
display settings while logged into a terminal server, but would like for them
to be able to change the display settings when logged into their workstation.

I hope this is possible. Thanks for any help you can provide.

 

[Mark Renoden [MSFT]]

Hi Smorg

You'll want to use policy loopback. This allows the User Configuration of
GPO's attached to the OU in which the Terminal Server resides to be used
instead of the policy that would normally apply to the user. Refer to:

231287 Loopback Processing of Group Policy
http://support.microsoft.com/?id=231287

Kind regards
--
Mark Renoden [MSFT]
Windows Platform Support Team
Email: (e-mail address removed)

Please note you'll need to strip ".online" from my email address to email
me; I'll post a response back to the group.

This posting is provided "AS IS" with no warranties, and confers no rights.