Brains slow to start on a Monday morning - I know the feeling 8-) I don't like "deny" - it's difficult to troubleshoot and gets you tied in knots. If you can avoid using "deny", do. I would put a user element on the Citrix Server GPO in loopback mode (merge or replace if you're using 2003, just replace with 2000). This should override the user settings from the User OU, so you can explicitly prevent the deployment of applications. Mvg, Jeremy -----Original Message----- From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of Rob Beekmans Sent: Monday 18 October 2004 12:03 To: thin@xxxxxxxxxxxxx Subject: [THIN] Gpo who rules? Hi list, I'm faced with a issue that my brains can't cope with at this moment.......... Situation.. Gpo on citrix server OU..... Gpo on users OU for deployment of applications What happens if a user that is situated in the user OU logs on to the citrix server located in the citrix server OU we all know. But can it be prevented??? I was in conflict with myself and some other guy about whether to set deny other polcies on applying on the citrix server policy would solve this issue.... Any one with any suggestions??????? Thanks in advance..... Met vriendelijke groeten / With kind regards Rob Beekmans Technical Consultant A-Tree Automatisering St. Annastraat 167 / 6524ET Nijmegen Business Phone: +31 24 6452000 Business Fax: +31 24 6450463 Business website: http://www.a-tree.nl Business E-mail: R.Beekmans@xxxxxxxxx Private E-mail: RobBeekmans@xxxxxxxxxxxxx Private E-mail: rob.beekmans@xxxxxxxxx - Disclaimer - "De informatie verzonden met dit e-mail bericht en de bijlagen is uitsluitend bestemd voor de geadresseerde(n). Gebruik van deze informatie door anderen dan de geadresseerde(n) is verboden. Indien u dit e-mail bericht bij vergissing heeft ontvangen, wilt u dan de verzender onmiddellijk waarschuwen en het bericht vernietigen. Het gebruik van e-mail is niet gegarandeerd veilig of foutloos; informatie kan worden onderschept, verminkt of verloren gaan; kan te laat of incompleet binnenkomen of virussen bevatten. Om deze reden neemt de verzender geen enkele verantwoordelijkheid voor fouten of wijzigingen in de inhoud van dit bericht als gevolg van het versturen via e-mail. Bij twijfel verzoeken wij u een kopie op te vragen. Alle door A-Tree verzonden E-mail is gecontroleerd op virussen." ******************************************************** This Weeks Sponsor RTO Software Do you know which applications are abusing your CPU and memory? Would you like to learn? -- Free for a limited time! Get the RTO Performance Analyzer to quickly learn the applications, users, and time of day possible problems exist. http://www.rtosoft.com/enter.asp?id20 ********************************************************** Useful Thin Client Computing Links are available at: http://thin.net/links.cfm *********************************************************** For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link: http://thin.net/citrixlist.cfm ******************************************************** This Weeks Sponsor RTO Software Do you know which applications are abusing your CPU and memory? Would you like to learn? -- Free for a limited time! Get the RTO Performance Analyzer to quickly learn the applications, users, and time of day possible problems exist. http://www.rtosoft.com/enter.asp?id20 ********************************************************** Useful Thin Client Computing Links are available at: http://thin.net/links.cfm *********************************************************** For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link: http://thin.net/citrixlist.cfm