August 29, 2008 10:16pm pdt

Member Login

Hall of Fame

Yearly

1KCTS 107,515
2tigermatt 47,612
3oBdA 45,757
4Chris-Dent 40,375
5leew 37,924
6RobWill 37,236
7Jay_Jay70 27,573
8henjoh09 25,270
9ryansoto 24,175
10Shift-3 20,900
11LauraEHu... 20,350
12toniur 19,961
13PlaceboC6 17,400
14lnkevin 16,900
15Netman66 16,575
16ebjers 14,800
17rindi 12,625
18ChiefIT 11,850
19tsmvp 11,720
20Paka 11,368
21dariusg 10,975
22purplepo... 10,800
23coolsport00 10,650
24TheCaped... 10,050
25mattee76 9,750

	[x] Attachment Details

Group Policy Loopback Terminal Server

Zones: Windows 2000 Server, Active Directory, Remote Desktop/Terminal Services

Tags: loopback, server, terminal, group, policy

Please help!!!! Need to apply a GPO asap.
I have a user OU "data mgmt" which has a GPO to setup standard desktops that the users log on to. I also have a Terminal Server OU. My TS is located in that directory which has a GPO that needs to apply a very restrictive user settings GPO. So my users log into their desktop and have standard profile settings, but when they RDP to the Term Server, they use the same username and password. I need to make sure that the user settings on the TS GPO are applied. For example, one setting on the data mgmt policy is to allow the user to shut down, however on the terminal server, I do not want that.

I came across a setting on the TS OU GPO:
User Group Policy loopback processing mode
Setting Path:
Computer Configuration/Administrative Templates/System/Group Policy

Here is the info in the policy information:
Applies alternate user settings when a user logs on to a computer affected by this setting.

This setting directs the system to apply the set of Group Policy objects for the computer to any user who logs on to a computer affected by this setting. It is intended for special-use computers, such as those in public places, laboratories, and classrooms, where you must modify the user setting based on the computer that is being used.

By default, the user's Group Policy objects determine which user settings apply. If this setting is enabled, then, when a user logs on to this computer, the computer's Group Policy objects determine which set of Group Policy objects applies.

To use this setting, select one of the following modes from the Mode box:

-- "Replace" indicates that the user settings defined in the computer's Group Policy objects replace the user settings normally applied to the user.

-- "Merge" indicates that the user settings defined in the computer's Group Policy objects and the user settings normally applied to the user are combined. If the settings conflict, the user settings in the computer's Group Policy objects take precedence over the user's normal settings.

If you disable this setting or do not configure it, the user's Group Policy objects determines which user settings apply.

Note: This setting is effective only when both the computer account and the user account are in Windows 2000 domains.

If you read the 'NOTE' shows it works on Win 2000 domains. However, I am using Windows 2003 domain and the user is also in the Win 2003 domain.

Any ideas??

Start your free trial to view this solution

[x]

The Solution Rating System

With so many solutions, how can you tell which solutions are most likely to help you and which ones are not? To provide you with a tool to use, we rate our solutions based on various elements that most accurately determine if a solution is a quality solution. To explain what factors affect the solution rating, here are the elements we take into consideration when formulating our solution rating.

The Grade of the Solution
The Zone Rank of the Expert Providing the Solution
The Number of Author and Expert Comments
The Number of Experts Contributing
The Feedback of the Community

Your Input Matters
Because of the way the system is set up, the most important variable in this equation is you. As a member of Experts Exchange, you are able to cast your vote on the quality of the solutions in regard to how complete, accurate, helpful and easy to understand each solution is. When you provide your feedback, each rating is adjusted accordingly. So, if you see a solution that has a poor rating that you think is a good solution, let us know by rating it. As you do, the rating will be adjusted and will become more accurate for other members of our site.

If you have any suggestions that you would like to make for our rating system, please ask a question in the Suggestions Zone of Community Support.

Thank you!

5.0

Question Stats

Zone: OS

Question Asked By: jsctechy

Solution Provided By: MSE-dwells

Participating Experts: 1

Solution Grade: A

Translate:

Loading Advertisement...

20080723-EE-VQP-34 / EE_QW_1_20070628