+ Post New Thread
Results 1 to 7 of 7
Windows Thread, TS Group Policy in Technical; I'm trying to apply some group policy settings to our terminal servers to restrict certain elements when a member of ...
  1. #1

    Join Date
    Apr 2007
    Location
    Croydon
    Posts
    493
    Thank Post
    18
    Thanked 29 Times in 28 Posts
    Rep Power
    20

    Question TS Group Policy

    I'm trying to apply some group policy settings to our terminal servers to restrict certain elements when a member of staff is logging to it. I have created the GPO, added the staff security group to the Security Filtering section of GPMC so that the policies don't apply to myself and other administrators, GP Modelling reports that the policies are being applied but when I log in none of them seem to have taken effect.

    When I remove the staff security group and revert to Authenticated Users the policies apply correctly but they effect myself and other admins (as you would expect)

    What am I doing wrong

  2. #2

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    15,392
    Thank Post
    797
    Thanked 1,588 Times in 1,391 Posts
    Blog Entries
    10
    Rep Power
    427
    Does the user group have the security rights to apply the policies. Also have you checked you have added the user to the group.

    Why are you not doing the group policy based on OU?

  3. #3

    Join Date
    Apr 2007
    Location
    Croydon
    Posts
    493
    Thank Post
    18
    Thanked 29 Times in 28 Posts
    Rep Power
    20
    Quote Originally Posted by FN-Greatermanchester View Post
    Does the user group have the security rights to apply the policies. Also have you checked you have added the user to the group.
    The security group has "Read (from security filtering)" permissions on the GPO and yes the user is part of the group! Also it's a universal group because the user exists in a different domain in the forest - should that make a difference?


    Quote Originally Posted by FN-Greatermanchester View Post
    Why are you not doing the group policy based on OU?
    The terminal servers are in their own OU and loopback processing (in replace mode) is on so that users don't get the normal user settings as if they were logging on to a normal machine.
    Last edited by adamf; 4th May 2008 at 10:57 AM.

  4. #4

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    15,392
    Thank Post
    797
    Thanked 1,588 Times in 1,391 Posts
    Blog Entries
    10
    Rep Power
    427
    Ah right ok, try without loopback and see what happens then.

    Do they have the "apply group policy" permission?

    Z

  5. #5

    Join Date
    Apr 2007
    Location
    Croydon
    Posts
    493
    Thank Post
    18
    Thanked 29 Times in 28 Posts
    Rep Power
    20
    I've got to have loopback on otherwise they will get their standard user settings they would get when they log on to a normal machine. I can't have staff having access to the server that would enable them to browse the local drives etc......

  6. #6

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    15,392
    Thank Post
    797
    Thanked 1,588 Times in 1,391 Posts
    Blog Entries
    10
    Rep Power
    427
    Just try it without and see if they get the standard settings. Loop back can cause problems with group policies applying.

  7. #7
    meastaugh1's Avatar
    Join Date
    Jul 2006
    Location
    London/Hertfordshire
    Posts
    888
    Thank Post
    68
    Thanked 84 Times in 69 Posts
    Rep Power
    31
    Try applying the policy to a domain local or global group to see if that helps.

SHARE:
+ Post New Thread

Similar Threads

  1. Group policy
    By pedster666 in forum Hardware
    Replies: 5
    Last Post: 27th February 2008, 10:03 AM
  2. group policy
    By kevin_lane in forum How do you do....it?
    Replies: 2
    Last Post: 27th July 2007, 12:17 PM
  3. Group Policy
    By faza in forum Wireless Networks
    Replies: 27
    Last Post: 5th July 2006, 06:34 AM
  4. Group Policy
    By faza in forum Windows
    Replies: 15
    Last Post: 23rd May 2006, 09:39 AM
  5. Group Policy
    By faza in forum Wireless Networks
    Replies: 2
    Last Post: 23rd May 2006, 07:30 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •