Windows Forum

Ask something
Discussion Locked

Group Policy for W2K Term. Server Users

0 helpful
3 replies

by iland

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I have a Win2k Terminal Server running in App. mode which is also a Domain Controller running AD. I can effectively get the GPO to lockdown the standard PC desktop but whenever someone connects via a Term. session the policy does not seem to apply. I do not need a per machine policy but a user policy. What am I missing here?

NOTE: This is a test lab enviroment, the actual deployment will be on Winterms running Windows CE embedded. This is also the only server on the network, it will bea deployment of about 30 thin clients. I also understand the "log on Locally" rights, the server is going to be located in a locked server room.

3 replies

by timwalsh

Because your Term. Server is also a Domain Controller (DC) you need to use a different GPO. There is one that applies specifically to DCs. It has all the same settings.

Here is what I would do:
If you haven't done so already, place all your Terminal Services users in a separate OU. Create the GPO for DCs using the same settings you applied to standard desktops and apply this GPO against the OU containing yoru TS users.

Hope this helps.

This discussion is closed to new replies.