[THIN] Re: Group Policy
- From: "Greg Reese" <GReese@xxxxxxxxxxxxxxxx>
- To: <thin@xxxxxxxxxxxxx>
- Date: Thu, 11 Jul 2002 12:04:18 -0400
I followed everyone's suggestions but I am still not getting the results I want.
Here is what I have done so far.
I have an OU called "Terminal Servers". In that OU is a Windows 2000 Terminal
Server (Sp2, hotfixes, MF XPa SP2)
I created two GPO's for that OU. Once is "Restrictions for Users" and one is
"Restrictions for Admins"
Security for "Restrictions for Users" is as follows:
Apply Group Policy: Allow is checked for Domain Users, Deny is checked for
Domain Admins.
For Restrictions for Admins: Deny is checked for Domain Users and Allow is
checked for Domain Admins. The Loopback policy is set to "Replace" for both.
None of the settings are applied for a user or an admin unless that user is
moved from its current OU to the terminal server OU. I am trying to get it to
apply the restrictions only when a user logs into the terminal server. I want
them to remain unrestricted when they log in to their local Win2k or XP Pro
workstation.
Thanks for all the help.
Greg
-----Original Message-----
From: Joe Shonk [mailto:JShonk@xxxxxxxxxxxxxx]
Sent: Tuesday, July 09, 2002 5:44 PM
To: 'thin@xxxxxxxxxxxxx'
Subject: [THIN] Re: Group Policy
Don't forget the loopback setting, and as Stephen mentioned Apply the policy
only to those user/groups and deny Admins.
-----Original Message-----
From: Greg Reese [mailto:GReese@xxxxxxxxxxxxxxxx]
Sent: Tuesday, July 09, 2002 2:34 PM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Group Policy
So if I create an OU called "Terminal Server" and get the GPO set just right,
then place the my terminal servers in that OU, the GPO will get applied for the
users that log in to it even if the userid is in a different OU?
Most of the settings I am making apply to the user portion of the GPO.
If I am understanding this right then this will be simple
-----Original Message-----
From: Joe Shonk [mailto:JShonk@xxxxxxxxxxxxxx]
Sent: Tuesday, July 09, 2002 5:16 PM
To: 'thin@xxxxxxxxxxxxx'
Subject: [THIN] Re: Group Policy
You need to put your TS is a different OU and apply the policies you want to
that OU. Second, you needs that policy (or a different GPO) setup for Lookback
mode.
Joe
-----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx [ mailto:thin-bounce@xxxxxxxxxxxxx]
Sent: Tuesday, July 09, 2002 2:11 PM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Group Policy
Sorry for the dumb question but I can't seem to find a way around this.
I have a group policy set for the users that log into my terminal servers but
some of those users also need to log into their windows 2000 pro fat client.
How do I apply the group policy to only their terminal sessions without messing
up their fat clients.
Thanks!
Greg
===================================
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link.
http://thethin.net/citrixlist.cfm
Other related posts:
