sorry for delay respond.
solution looks very good I just cant find policy line for restrict unrestrict desktop for all users?
Main Topics
Browse All TopicsHow to configure Citrix Presentation 4.5 server for users logged in with full ICA client so that they only have access to a few applications on the presentation server while full access on their local desktops ( so group policy wont work); user are logging in with domain account
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.

Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
You'll need to be way more clear in the description of your problem.
Your initial question was about how to have different policies applied to a user, based on the computer they're logging on to.
Now you're asking a question about a policy applying, for which it is neither clear where the user is logging on to, nor which policy setting you've enabled where.
In general, you can use either rsop.msc on the local machine or a report run from the GPMC to find out which policies are applying from where.
Business Accounts
Answer for Membership
by: oBdAPosted on 2009-10-28 at 07:09:11ID: 25683372
This *will* work with group policies.
om/kb/2312 87
Create a dedicated OU "Terminal Server" or whatever, and move your terminal server(s) into this OU.
Create a GPO "Loopback" and link it to your Terminal Server OU; enable the Loopback mode as described in the article below, and set it to "Replace". Reboot the terminal server(s).
Do NOT configure any policies under "User Configuration" in the Loopback GPO. You can add policies under "Computer Configuration" to this OU, but it's useful to have the Loopback setting in a separate GPO, so that it's immediately clear that these machines are in GPO loopback processing mode.
You will now be able to link additional(!) GPOs with *user* settings to the Terminal Server OU; these GPOs will be processed for every user logging on to a terminal server, even though the user object is not in the TS OU. You can use the Security Filtering of the GPO to prevent the GPO application for administrators.
The regular "Desktop" user policies will not be applied, because the Loopback mode is set to "Replace", so you can start with a "clean slate" when applying the TS policies.
Loopback processing of Group Policy
http://support.microsoft.c