[THIN] Re: Group Policy

  • From: "Greg Reese" <GReese@xxxxxxxxxxxxxxxx>
  • To: <thin@xxxxxxxxxxxxx>
  • Date: Thu, 11 Jul 2002 13:28:28 -0400

worked perfectly!

Thanks again to everyone who has helped with all of this.

Greg

-----Original Message-----
From: Lonnie Truskowski [mailto:ltruskowski@xxxxxxxxxxxxxxxxx]
Sent: Thursday, July 11, 2002 12:41 PM
To: 'thin@xxxxxxxxxxxxx'
Subject: [THIN] Re: Group Policy


I was having the same problem, I found this in the archives and it worked
for me.

1. Create an OU for the Terminal Servers and move the TS machines into this
OU 
2. Create a group policy for the Terminal Server OU with the following
setttings a) No Override b) Block inheritence c) Administrators specifically
denied apply access to policy Within this policy enable the Group Policy
Objects loopback processing. NOTE: Just doing this as MS Article Q260370
suggested did not work for me. Good luck if it worked for you. Anyway the
next couple of steps is how I got it to work. 
3. Use gpedit.msc on the local Terminal Server to open the local machine
policy. Within the local policy set the Group Policy Loopback processing to
enabled. 
4. Test the local loopback by changing a setting in the local machine policy
using gpedit.msc. Try and deny access to something like the display control
panel and then test it by attempting to access the display properties. 
5. Once you know the local policy has worked then open gpedit again on the
local machine and set the Group Policy Loopback to Not Configured. 
6. The Group Policy Object defined in the Acitive directory will now work
for the Machines in the OU created for Terminal Servers. You can create
different policies for different groups based on permissions you give users
for the group policy object. eg you explicity deny apply permissions to
users such as administrator who you do not want to have the policy applied
to. 






===================================
For Archives, to Unsubscribe, Subscribe or 
set Digest or Vacation mode use the below link.

http://thethin.net/citrixlist.cfm




===================================
For Archives, to Unsubscribe, Subscribe or 
set Digest or Vacation mode use the below link.

http://thethin.net/citrixlist.cfm

Other related posts: