I followed everyone's suggestions but I am still not getting the results I want. Here is what I have done so far. I have an OU called "Terminal Servers". In that OU is a Windows 2000 Terminal Server (Sp2, hotfixes, MF XPa SP2) I created two GPO's for that OU. Once is "Restrictions for Users" and one is "Restrictions for Admins" Security for "Restrictions for Users" is as follows: Apply Group Policy: Allow is checked for Domain Users, Deny is checked for Domain Admins. For Restrictions for Admins: Deny is checked for Domain Users and Allow is checked for Domain Admins. The Loopback policy is set to "Replace" for both. None of the settings are applied for a user or an admin unless that user is moved from its current OU to the terminal server OU. I am trying to get it to apply the restrictions only when a user logs into the terminal server. I want them to remain unrestricted when they log in to their local Win2k or XP Pro workstation. Thanks for all the help. Greg -----Original Message----- From: Joe Shonk [mailto:JShonk@xxxxxxxxxxxxxx] Sent: Tuesday, July 09, 2002 5:44 PM To: 'thin@xxxxxxxxxxxxx' Subject: [THIN] Re: Group Policy Don't forget the loopback setting, and as Stephen mentioned Apply the policy only to those user/groups and deny Admins. -----Original Message----- From: Greg Reese [mailto:GReese@xxxxxxxxxxxxxxxx] Sent: Tuesday, July 09, 2002 2:34 PM To: thin@xxxxxxxxxxxxx Subject: [THIN] Re: Group Policy So if I create an OU called "Terminal Server" and get the GPO set just right, then place the my terminal servers in that OU, the GPO will get applied for the users that log in to it even if the userid is in a different OU? Most of the settings I am making apply to the user portion of the GPO. If I am understanding this right then this will be simple -----Original Message----- From: Joe Shonk [mailto:JShonk@xxxxxxxxxxxxxx] Sent: Tuesday, July 09, 2002 5:16 PM To: 'thin@xxxxxxxxxxxxx' Subject: [THIN] Re: Group Policy You need to put your TS is a different OU and apply the policies you want to that OU. Second, you needs that policy (or a different GPO) setup for Lookback mode. Joe -----Original Message----- From: thin-bounce@xxxxxxxxxxxxx [ mailto:thin-bounce@xxxxxxxxxxxxx] Sent: Tuesday, July 09, 2002 2:11 PM To: thin@xxxxxxxxxxxxx Subject: [THIN] Group Policy Sorry for the dumb question but I can't seem to find a way around this. I have a group policy set for the users that log into my terminal servers but some of those users also need to log into their windows 2000 pro fat client. How do I apply the group policy to only their terminal sessions without messing up their fat clients. Thanks! Greg =================================== For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link. http://thethin.net/citrixlist.cfm