[THIN] Re: Group Policy loopback

  One problem with that approach is that if a user who isn't in the 'Citrix'
group logs onto the server, he gets an unrestricted session. I usually setup
a lowest-priority GPO that removes everything (and deny Citrix admins
application), then add higher level GPO's that add priveleges back in. 
  I usually do have a Citrix Users group as well, but I use that on the
ICA-TCP connection permissions: I remove the defaults, add back System=Full,
Citrix Admins=Full, Citrix Users=User.

JD 

> -----Original Message-----
> From: thin-bounce@xxxxxxxxxxxxx 
> [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of Matthew Shrewsbury
> Sent: Monday, August 30, 2004 7:20 AM
> To: thin@xxxxxxxxxxxxx
> Subject: [THIN] Re: Group Policy loopback
> 
> In my case I created a group for Citrix access and only 
> applied the GPO to that group. Then each user has to be a 
> member of this group to access Citrix and then the GPO policy 
> is applied. Administrators are not a member of this group so 
> they are unaffected.
> 
> Matthew Shrewsbury, MCSE+Internet MCSE 2000 CCA Network Administrator
> 
> -----Original Message-----
> From: Minero Hector B DLVA [mailto:MineroHB@xxxxxxxxxxxxx]
> Sent: Monday, August 30, 2004 10:14 AM
> To: Thin (E-mail)
> Subject: [THIN] Group Policy loopback
> 
> Hello all,
> I'm trying to setup a Win2k Group policy for Terminal servers 
> and I need to use the "Group Policy loopback" option.  
> Everything works as expected; except that the Administrators 
> are also affected by the policy.
> How can I use the loopback option without affecting 
> Administrators when they log in to the WTS servers?
> 
> Thanks,
> 
> Hector.-
> _________________________________
> Hector Minero
> NSWCDD Code K55
> Ph: (540)653-8859
> Fax:(540)653-8575
> 
> ********************************************************
> This Weeks Sponsor RTO Software
> Do you know which applications are abusing your CPU and memory?
> Would you like to learn? --   Free for a limited time!
> Get the RTO Performance Analyzer to quickly learn the 
> applications, users, and time of day possible problems exist.
> http://www.rtosoft.com/enter.asp?id=320
> **********************************************************
> Useful Thin Client Computing Links are available at:
> http://thin.net/links.cfm
> ***********************************************************
> For Archives, to Unsubscribe, Subscribe or set Digest or 
> Vacation mode use the below link:
> http://thin.net/citrixlist.cfm
> ********************************************************
> This Weeks Sponsor RTO Software
> Do you know which applications are abusing your CPU and memory?
> Would you like to learn? --   Free for a limited time!
> Get the RTO Performance Analyzer to quickly learn the 
> applications, users, and time of day possible problems exist.
> http://www.rtosoft.com/enter.asp?id20
> **********************************************************
> Useful Thin Client Computing Links are available at:
> http://thin.net/links.cfm
> ***********************************************************
> For Archives, to Unsubscribe, Subscribe or set Digest or 
> Vacation mode use the below link:
> http://thin.net/citrixlist.cfm
> 

********************************************************
This Weeks Sponsor RTO Software
Do you know which applications are abusing your CPU and memory?
Would you like to learn? --   Free for a limited time!
Get the RTO Performance Analyzer to quickly learn the applications,
users, and time of day possible problems exist.
http://www.rtosoft.com/enter.asp?id=320
********************************************************** 
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
***********************************************************
For Archives, to Unsubscribe, Subscribe or 
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm

Other related posts: