Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 335
  • Last Modified:

Preventing GPOs from being applied to Windows Terminal Servers 2008

I have multiple OUs with group policies customized for each of them.  I created a terminal server OU that contains my terminal servers, but did not attach any group policies to it.

I logged into one of the terminal servers with a user account and noticed that the terminal server session contained all the group policy settings that belongs to the OU which contains the user account.  How do I prevent this from happening?
0
akyuen
Asked:
akyuen
1 Solution
 
oBdACommented:
Create a new GPO "GPOLoopbackProcessing", link it to the Terminal Server OU, and enable Loopback Processing in Replace mode; you should find it in Computer Configuration\Policies\Administrative Templates\System\Group Policy, "User Group Policy Loopback Processing Mode." Reboot the terminal server(s).
This makes sure that the regular user policies won't be applied to users logging on to servers in that OU.
You can add additional GPOs with user settings to the TS OU; these will only be applied to users logging on to the Terminal Server (and you can still use the regular Security Filtering to selectively apply them to different user groups).
Loopback processing of Group Policy
http://support.microsoft.com/kb/231287
0

Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now