[THIN] Re: SV: Re: SV: Active Directory GPO and Citrix

  • From: "Lee, David (STRATEGIC PROJECTS)" <David.Lee@xxxxxxxxxxxxxxx>
  • To: "'thin@xxxxxxxxxxxxx'" <thin@xxxxxxxxxxxxx>
  • Date: Thu, 1 Jul 2004 10:48:29 +0100

Have a look at the MS KB article 260370.  We found the user configuration
part of the GPO did not work with loopback until we applied the policy to
the machine account.....

-----Original Message-----
From: Svein Arild Haugum [mailto:svein@xxxxxxxxxxxxxx]
Sent: 30 June 2004 16:48
To: thin@xxxxxxxxxxxxx
Subject: [THIN] SV: Re: SV: Active Directory GPO and Citrix


Why do you meed to do this?
 
I have never done this, and I have had no problems at all with this.
 
This must only bee true if you have several computers in that OU and want to
filter the policy based on this groups members?
 

Mvh 
Svein Arild 

-----Opprinnelig melding-----
Fra: Lee, David (STRATEGIC PROJECTS) [mailto:David.Lee@xxxxxxxxxxxxxxx]
Sendt: 30. juni 2004 17:09
Til: 'thin@xxxxxxxxxxxxx'
Emne: [THIN] Re: SV: Active Directory GPO and Citrix


Nearly there:- 
 
4)  Create a security group within your new OU (or wherever) and set the GPO
to apply to this group.  Add the Citrix machine accounts to the group. 
 
 

-----Original Message-----
From: Matthew Shrewsbury [mailto:MShrewsbury@xxxxxxxxxxxxxxx]
Sent: 30 June 2004 14:42
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: SV: Active Directory GPO and Citrix



If I understand this correctly I need to do the following.

 

1) Move my Citrix server into a new OU called "Citrix Farm" (name could be
anything of course).

2) Create a GPO for the "Citrix Farm" OU.

3) Setup my custom Citrix only settings and set Loopback on the GPO for
"Citrix Farm" OU.

 

Does this sound right?

 

Matthew Shrewsbury

Network Administrator

 

-----Original Message-----
From: Lee, David (STRATEGIC PROJECTS) [mailto:David.Lee@xxxxxxxxxxxxxxx] 
Sent: Wednesday, June 30, 2004 9:31 AM
To: 'thin@xxxxxxxxxxxxx'
Subject: [THIN] Re: SV: Active Directory GPO and Citrix

 

Note that each Citrix servers machine account needs to be added to group
which applies the loopback policy.

-----Original Message-----
From: Matthew Shrewsbury [mailto:MShrewsbury@xxxxxxxxxxxxxxx]
Sent: 30 June 2004 14:03
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: SV: Active Directory GPO and Citrix

Perfect!! Now why can't Microsoft explain it in that clear of English? Thank
very much for your explanation. 

 

Matthew Shrewsbury

Network Administrator

 

-----Original Message-----
From: Svein Arild Haugum [mailto:svein@xxxxxxxxxxxxxx] 
Sent: Wednesday, June 30, 2004 8:54 AM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] SV: Active Directory GPO and Citrix

 

Use the loopback policy.

 

Using this on the Termialserver computers OU will cause all users logging on
to them, to resolve the User Configuration from this OU.

This way, setting a User setting here, will only apply for a user login into
a Terminal Server.

 

Mvh 
Svein Arild 

 

 -----Opprinnelig melding-----
Fra: Matthew Shrewsbury [mailto:MShrewsbury@xxxxxxxxxxxxxxx]
Sendt: 30. juni 2004 14:48
Til: thin@xxxxxxxxxxxxx
Emne: [THIN] Active Directory GPO and Citrix

I am getting ready to deploy a new Citrix farm and want to have a locked
down Citrix environment using AD GPOs. However I also have a large number of
fat Win2k and XP clients. How do I setup the GPOs so that they only apply
when a user logs into Citrix. Do I use the "Loopback" GPO object and if so
can someone give me a little info on how the loopback works?

 

Thanks for any advice / suggestions.

 

Matthew Shrewsbury

Network Administrator

 

Other related posts: