Depending on your configuration, it should be something like Separate OU for your TS environment GPO's within the OU set to loopback mode & apply to the Terminal Servers & User groups directly. -----Original Message----- From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of McDonald, William Sent: Saturday, 24 January 2009 7:39 a.m. To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] Lockdown Policy on Terminal Server A TS policy only works for me if it is applied to the Authenticated Users group, but this applies the policy to all users, including administrators, even if I have admins set to deny applying policy. If I apply the group policy to another group, TS_App_Users, and remove Authenticated users or even just uncheck Apply Policy under Authenticated Users, then it won't get applied at all. How is this supposed to work? Regards, Bill McDonald Systems Administrator II Ebara Technologies, Inc. 51 Main Avenue Sacramento, CA 95838 Direct: (916) 561-4865 Fax: (916) 920-5066 wmcdonald@xxxxxxxxxxxxx *********************** You can unsubscribe from gptalk by sending email to gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by logging into the freelists.org Web interface. Archives for the list are available at //www.freelists.org/archives/gptalk/ ************************ *********************** You can unsubscribe from gptalk by sending email to gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by logging into the freelists.org Web interface. Archives for the list are available at //www.freelists.org/archives/gptalk/ ************************