help group policy not working windows server 2008 AD

iamaidiot
iamaidiot used Ask the Experts™
on
Hello,

I have a server that will be used as a terminal server.  I want to create a gpo that will disable some features like shutdown, control panel for regular users but not the domain admins.

To do this I created an ou TS.. I created a security group TS.  I joined the server moved the server to the out made the server member of the security group.  I then created a Group policy linked it to TS ou then under the GP i went to delegation advanced add then choose domain admins and made sure apply policy is set to deny.

The problem is group policy didnt apply to any users at all.  I did RSOP.msc but it didnt show the changes I made under the group policy.  I tried gpupdate/force and also restarted the.

I am sure I am missing a steup most likely out to link the out to the security group or maybe out has to be linked directly to the server..

Please help
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
View Solutions Only
Chief Project Engineer
Commented:
Hi,
You need to configure loopback processing mode for this gpo.
iamaidiot

Author

Commented:
i dont know how to do that is there an article u can point me to?
Alexey KomarovChief Project Engineer
Commented:
The loopback setting is located under Computer Configuration/Administrative Templates/System/Group Policy in the Group Policy Management Editor (GPME). 

https://blogs.technet.microsoft.com/askds/2013/02/08/circle-back-to-loopback/
iamaidiot

Author

Commented:
you guys have been very helpful..works like a charm.. thank you

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial