As you are using loopback and machine based (effectively) are you considering machine security on the GPO? Neil -----Original Message----- From: Greg Reese [mailto:GReese@xxxxxxxxxxxxxxxx] Sent: 11 July 2002 17:04 To: thin@xxxxxxxxxxxxx Subject: [THIN] Re: Group Policy I followed everyone's suggestions but I am still not getting the results I want. Here is what I have done so far. I have an OU called "Terminal Servers". In that OU is a Windows 2000 Terminal Server (Sp2, hotfixes, MF XPa SP2) I created two GPO's for that OU. Once is "Restrictions for Users" and one is "Restrictions for Admins" Security for "Restrictions for Users" is as follows: Apply Group Policy: Allow is checked for Domain Users, Deny is checked for Domain Admins. For Restrictions for Admins: Deny is checked for Domain Users and Allow is checked for Domain Admins. The Loopback policy is set to "Replace" for both. None of the settings are applied for a user or an admin unless that user is moved from its current OU to the terminal server OU. I am trying to get it to apply the restrictions only when a user logs into the terminal server. I want them to remain unrestricted when they log in to their local Win2k or XP Pro workstation. *********************************************************************** This e-mail and its attachments are intended for the above named recipient(s) only and are confidential and may be privileged. If they have come to you in error you must take no action based on them, nor must you copy or disclose them or any part of their contents to any person or organisation; please notify the sender immediately and delete this e-mail and its attachments from your computer system. Please note that Internet communications are not necessarily secure and may be changed, intercepted or corrupted. We advise that you understand and observe this lack of security when e-mailing us and we will not accept any liability for any such changes, interceptions or corruptions. Although we have taken steps to ensure that this e-mail and its attachments are free from any virus, we advise that in keeping with good computing practice the recipient should ensure they are actually virus free. Copyright in this e-mail and attachments created by us belongs to Littlewoods. Littlewoods takes steps to prohibit the transmission of offensive, obscene or discriminatory material. If this message contains inappropriate material please forward the e-mail intact to postmaster@xxxxxxxxxxxxxxxxx and it will be investigated. Statements and opinions contained in this e-mail may not necessarily represent those of Littlewoods. Please note that e-mail communication may be monitored. Registered office: Littlewoods Retail Limited, Sir John Moores Building, 100 Old Hall Street, Liverpool, L70 1AB Registered no: 421258 http://www.littlewoods.com ***********************************************************************