Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

Editing Group Policy for Terminal Services users

Posted on 2006-10-27
7
Medium Priority
?
301 Views
Last Modified: 2010-04-18
I have 2 group policies in place on server 03 that installs a time clock application and then launches it when users login.  This works like it is supposed locally and over VPN. However I have users at these VPN locations that run terminal services applications and I do want the policy to run when they logon over terminal services.  How can I edit my current GP or add a new one to keep this from happening.
0
Comment
Question by:dwatkinsics
  • 4
  • 2
7 Comments
 
LVL 9

Expert Comment

by:SamuraiCrow
ID: 17822374
Is there any way to launch it from the command line?  If so you can add the command syntax to the first line of the usrlogon.cmd located in the c:\windows\system32 directory on the server.  This will launch the app every time someone logs into the terminal server.  If you absolutely need to use group policy you can try to use loopback processing as discussed here:

http://support.microsoft.com/kb/231287
0
 

Author Comment

by:dwatkinsics
ID: 17822485
That is supposed to read I do NOT want the policy to run when they logon through terminal services using their standerd logins.  It hangs the software and they cannot continue with their session until that application is closed.  Sorry about the error.  
0
 
LVL 9

Expert Comment

by:SamuraiCrow
ID: 17822531
That makes a difference :)

How is the group policy constructed?  Does it call a login script that installs and launches the application or is it a software and registry based group policy?
0
Nothing ever in the clear!

This technical paper will help you implement VMware’s VM encryption as well as implement Veeam encryption which together will achieve the nothing ever in the clear goal. If a bad guy steals VMs, backups or traffic they get nothing.

 

Author Comment

by:dwatkinsics
ID: 17822565
We can remove the the GPO that installs the software but how can I make the app launch after a domain login but not when they login the the term server.  The app currently launches via command script in Group Policy.
0
 
LVL 9

Expert Comment

by:SamuraiCrow
ID: 17822702
If it is being launched from a script file you can add conditional processing such as:

If /i %computername%==TerminalServerName (goto Next)
<Install Timeclock App>
<Start Timeclock App>

:Next
<Standard Login Stuff>

This will cause the item between the if statement and the :Next statement to get skipped when the computername is equal to the terminal server name.  It's pretty low tech but it never breaks!

Is this more what you are looking for?
0
 
LVL 9

Accepted Solution

by:
SamuraiCrow earned 1000 total points
ID: 17822710
Of course when the computer name is not the terminal server name the timeclock and app install will run properly.  
0

Featured Post

Important Lessons on Recovering from Petya

In their most recent webinar, Skyport Systems explores ways to isolate and protect critical databases to keep the core of your company safe from harm.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The HP utility "HP Lights-Out Online Configuration Utility for Windows Server 2003/2008" could be of great use when it comes to remotely configure a HP servers ILO WITHOUT rebooting the server. We would only need to create and run scripts using thi…
Learn about cloud computing and its benefits for small business owners.
We’ve all felt that sense of false security before—locking down external access to a database or component and feeling like we’ve done all we need to do to secure company data. But that feeling is fleeting. Attacks these days can happen in many w…
Loops Section Overview

916 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question