Block user Group policy only when user logs onto Terminal Server

Posted on 2007-10-04
Last Modified: 2012-05-05

I have a Windows 2003 AD domain and have many group policies setup for the users. One of which displays a disclaimer when users login to their PCs (by running a small vbs script).

I have recently setup a Terminal Services environment and users are logging onto this also to use certain apps. However, when they login to the Terminal Services environment they get the disclaimer again.

Is there a way to stop the disclaimer appearing when they login via Terminal Services but still appear when they login to their local XP PCs? Basically, I want to block the User GPO from running on the certain servers, ie. the Terminal Servers.

Is this possible?

Any help appreciated.

Question by:sterlingdev
    1 Comment
    LVL 30

    Accepted Solution

    Link a GPO to the OU containing the Terminal Servers, and configure that OU to use Loopback Processing in "Replace" mode, as described here:

    Loopback Processing was specifically designed for scenarios like the one you are describing.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    6 Surprising Benefits of Threat Intelligence

    All sorts of threat intelligence is available on the web. Intelligence you can learn from, and use to anticipate and prepare for future attacks.

    Starting in Windows Server 2008, Microsoft introduced the Group Policy Central Store. This automatically replicating location allows IT administrators to have the latest and greatest Group Policy (GP) configuration settings available. Let’s expl…
    Introduction You may have a need to setup a group of users to allow local administrative access on workstations.  In a domain environment this can easily be achieved with Restricted Groups and Group Policies. This article will demonstrate how to…
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
    This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

    758 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    11 Experts available now in Live!

    Get 1:1 Help Now