worked perfectly! Thanks again to everyone who has helped with all of this. Greg -----Original Message----- From: Lonnie Truskowski [mailto:ltruskowski@xxxxxxxxxxxxxxxxx] Sent: Thursday, July 11, 2002 12:41 PM To: 'thin@xxxxxxxxxxxxx' Subject: [THIN] Re: Group Policy I was having the same problem, I found this in the archives and it worked for me. 1. Create an OU for the Terminal Servers and move the TS machines into this OU 2. Create a group policy for the Terminal Server OU with the following setttings a) No Override b) Block inheritence c) Administrators specifically denied apply access to policy Within this policy enable the Group Policy Objects loopback processing. NOTE: Just doing this as MS Article Q260370 suggested did not work for me. Good luck if it worked for you. Anyway the next couple of steps is how I got it to work. 3. Use gpedit.msc on the local Terminal Server to open the local machine policy. Within the local policy set the Group Policy Loopback processing to enabled. 4. Test the local loopback by changing a setting in the local machine policy using gpedit.msc. Try and deny access to something like the display control panel and then test it by attempting to access the display properties. 5. Once you know the local policy has worked then open gpedit again on the local machine and set the Group Policy Loopback to Not Configured. 6. The Group Policy Object defined in the Acitive directory will now work for the Machines in the OU created for Terminal Servers. You can create different policies for different groups based on permissions you give users for the group policy object. eg you explicity deny apply permissions to users such as administrator who you do not want to have the policy applied to. =================================== For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link. http://thethin.net/citrixlist.cfm =================================== For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link. http://thethin.net/citrixlist.cfm