[THIN] Re: SV: Active Directory GPO and Citrix
- From: "Matthew Shrewsbury" <MShrewsbury@xxxxxxxxxxxxxxx>
- To: <thin@xxxxxxxxxxxxx>
- Date: Wed, 30 Jun 2004 11:37:30 -0400
Why do I need to add the Citrix machine accounts to the new group? If I
move the servers under the Citrix Farm OU the GPO will apply to them.
Then set deny apply GPO to Domain Admins group. Am I missing something?
Thanks for all your help.
Matthew Shrewsbury
Network Administrator
-----Original Message-----
From: Lee, David (STRATEGIC PROJECTS) [mailto:David.Lee@xxxxxxxxxxxxxxx]
Sent: Wednesday, June 30, 2004 11:09 AM
To: 'thin@xxxxxxxxxxxxx'
Subject: [THIN] Re: SV: Active Directory GPO and Citrix
Nearly there:-
4) Create a security group within your new OU (or wherever) and set the
GPO to apply to this group. Add the Citrix machine accounts to the
group.
-----Original Message-----
From: Matthew Shrewsbury [mailto:MShrewsbury@xxxxxxxxxxxxxxx]
Sent: 30 June 2004 14:42
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: SV: Active Directory GPO and Citrix
If I understand this correctly I need to do the following.
1) Move my Citrix server into a new OU called "Citrix Farm"
(name could be anything of course).
2) Create a GPO for the "Citrix Farm" OU.
3) Setup my custom Citrix only settings and set Loopback on the
GPO for "Citrix Farm" OU.
Does this sound right?
Matthew Shrewsbury
Network Administrator
-----Original Message-----
From: Lee, David (STRATEGIC PROJECTS)
[mailto:David.Lee@xxxxxxxxxxxxxxx]
Sent: Wednesday, June 30, 2004 9:31 AM
To: 'thin@xxxxxxxxxxxxx'
Subject: [THIN] Re: SV: Active Directory GPO and Citrix
Note that each Citrix servers machine account needs to be added
to group which applies the loopback policy.
-----Original Message-----
From: Matthew Shrewsbury
[mailto:MShrewsbury@xxxxxxxxxxxxxxx]
Sent: 30 June 2004 14:03
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: SV: Active Directory GPO and Citrix
Perfect!! Now why can't Microsoft explain it in that
clear of English? Thank very much for your explanation.
Matthew Shrewsbury
Network Administrator
-----Original Message-----
From: Svein Arild Haugum [mailto:svein@xxxxxxxxxxxxxx]
Sent: Wednesday, June 30, 2004 8:54 AM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] SV: Active Directory GPO and Citrix
Use the loopback policy.
Using this on the Termialserver computers OU will cause
all users logging on to them, to resolve the User Configuration from
this OU.
This way, setting a User setting here, will only apply
for a user login into a Terminal Server.
Mvh
Svein Arild
-----Opprinnelig melding-----
Fra: Matthew Shrewsbury
[mailto:MShrewsbury@xxxxxxxxxxxxxxx]
Sendt: 30. juni 2004 14:48
Til: thin@xxxxxxxxxxxxx
Emne: [THIN] Active Directory GPO and Citrix
I am getting ready to deploy a new Citrix farm and want
to have a locked down Citrix environment using AD GPOs. However I also
have a large number of fat Win2k and XP clients. How do I setup the GPOs
so that they only apply when a user logs into Citrix. Do I use the
"Loopback" GPO object and if so can someone give me a little info on how
the loopback works?
Thanks for any advice / suggestions.
Matthew Shrewsbury
Network Administrator
Other related posts:
