policys not working

Posted on 2007-03-23
Medium Priority
Last Modified: 2012-06-21
no "reported" changes to system but its all going wrong today

windows 2000 terminalserver runing citrix  all uptodat esp wise

AD is 2003
we use policy for folder redirection of Desktop and start menu
and all the usual lockdown  removing shutdown etc etc

the users tsprofile is also stored on the AD server

when a user logs on they do not get the policy's applied

modling wizard shows no issues
even the event viewer on the citrix box says  desktop redirection sucsessful

been running fine for a couple of years where do i start looking>?
Question by:mhamer

Expert Comment

ID: 18781550
Check disk space on volue where tsprofile stored.

Also, have you stopped and started TS services?

Author Comment

ID: 18782878
hi loads of space on tsprofileshare (200gigs spare)
yes the ts servers were rebooted

basically users are in an OU  with no terminal based policy's

the ts servers are in there own ou  one policy for loopback (replace) and one with all the folder redirection and lock downs)
there is also a site policy, that was set to "enforced" today, but i am unsure if it was before or after first case.  this has been undone but no change yet..

slow link i know can cause similar  but theses are servers in same rack local to the ad dc's

LVL 40

Accepted Solution

Vadim Rapp earned 1500 total points
ID: 18783011
you can enable debugging using this:


LVL 13

Expert Comment

ID: 18794033
basically MS doesn't guarantee that TS loopback will work with citrix, despite the fact that TS derived from citrix and faiure gpo application is rarely seen on citrix boxes.

try to log into the box using TS/RDP to see if that works.

is "folder redirection" the only setting in the policy is not being applied? Or all settings in the policy  are not being applied? and are we talking about only one policy that has loopback enabled?

You have to check the application log on TS. You can also log into TS, run "gpresult /v" and post back output.

Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Dropbox has a relatively new feature called Smart Sync.  This feature allows Dropbox Professional (not plus) and Dropbox Business (if enabled) users to store information in Dropbox WITHOUT storing any files on their computer.
This tutorial shows a simple method of resetting a forgotten Windows 10 Password, on both a Physical and VM VirtualBox machine without the need for any third-party tools. Both Local and Microsoft Connected accounts are covered. Enjoy...
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

624 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question