RDP / Terminal Services / Mandatory Profiles

[Glenn]

I have users that connect to a Citrix environment and use the Terminal Server
tab on the AD User Properties to setup thier profile. Now a couple of these
users need to connect to a Windows Server 2003 R2 (64bit) to run some
processes using Remote Desktop (RDP).

The problem is that thier profile for the Citrix servers get loaded as a
mandatory profile on the server. I want them to get a local profile and
ignore the other settings. I have looked at GP and Local Security settings
without any success. There are a some settings under
Computer>Admin>Profiles>Windows>Terminal Services>Profiles I tried but did
not work.

Thanks,
--
Glenn W. Johnson
System Support Manager
Miami Dade County, DERM

 

[Jeff Pitsch]

Re: RDP / Terminal Services / Mandatory Profiles

Look under Computer, Policies, Admin Templates, System, user Profiles,
and the setting you want is "Only allow local user profiles".

Jeff Pitsch
Microsoft MVP - Terminal Services

Glenn wrote:
> I have users that connect to a Citrix environment and use the Terminal Server
> tab on the AD User Properties to setup thier profile. Now a couple of these
> users need to connect to a Windows Server 2003 R2 (64bit) to run some
> processes using Remote Desktop (RDP).
>
> The problem is that thier profile for the Citrix servers get loaded as a
> mandatory profile on the server. I want them to get a local profile and
> ignore the other settings. I have looked at GP and Local Security settings
> without any success. There are a some settings under
> Computer>Admin>Profiles>Windows>Terminal Services>Profiles I tried but did
> not work.
>
> Thanks,

 

[Jeff Pitsch]

Re: RDP / Terminal Services / Mandatory Profiles

The other option is to split your Citrix servers into their own OU and
then use Group Policy to assign mandatory profiles ONLY to that OU.

by the way, I gave the path based on Win2k8 above, it should be the same
or very close to Win2k3.

Jeff Pitsch
Microsoft MVP - Terminal Services

Glenn wrote:
> I have users that connect to a Citrix environment and use the Terminal Server
> tab on the AD User Properties to setup thier profile. Now a couple of these
> users need to connect to a Windows Server 2003 R2 (64bit) to run some
> processes using Remote Desktop (RDP).
>
> The problem is that thier profile for the Citrix servers get loaded as a
> mandatory profile on the server. I want them to get a local profile and
> ignore the other settings. I have looked at GP and Local Security settings
> without any success. There are a some settings under
> Computer>Admin>Profiles>Windows>Terminal Services>Profiles I tried but did
> not work.
>
> Thanks,

 

[Glenn]

Re: RDP / Terminal Services / Mandatory Profiles

I tried the "Only Allow Local User Profiles" and that did not work. The
servers are in different OU. The Citrix one are in an OU I do not have
control over but I can control the OU that my servers are located.

We are runing a Windows 2008 AD (managed by another group) and my servers
are 2003 R2 (64 bit). I do not know about the Citrix servers.

I will try the GP mandatory assign .

Thanks,
--
Glenn W. Johnson
System Support Manager
Miami Dade County, DERM


"Jeff Pitsch" wrote:

> The other option is to split your Citrix servers into their own OU and
> then use Group Policy to assign mandatory profiles ONLY to that OU.
>
> by the way, I gave the path based on Win2k8 above, it should be the same
> or very close to Win2k3.
>
> Jeff Pitsch
> Microsoft MVP - Terminal Services
>
> Glenn wrote:
> > I have users that connect to a Citrix environment and use the Terminal Server
> > tab on the AD User Properties to setup thier profile. Now a couple of these
> > users need to connect to a Windows Server 2003 R2 (64bit) to run some
> > processes using Remote Desktop (RDP).
> >
> > The problem is that thier profile for the Citrix servers get loaded as a
> > mandatory profile on the server. I want them to get a local profile and
> > ignore the other settings. I have looked at GP and Local Security settings
> > without any success. There are a some settings under
> > Computer>Admin>Profiles>Windows>Terminal Services>Profiles I tried but did
> > not work.
> >
> > Thanks,
>

 

[Jeff Pitsch]

Re: RDP / Terminal Services / Mandatory Profiles

Is it possible for you to work with your Citrix team then to have them
locate the profile path in Group Policy instead of user accounts?

Jeff Pitsch
Microsoft MVP - Terminal Services

Glenn wrote:
> I tried the "Only Allow Local User Profiles" and that did not work. The
> servers are in different OU. The Citrix one are in an OU I do not have
> control over but I can control the OU that my servers are located.
>
> We are runing a Windows 2008 AD (managed by another group) and my servers
> are 2003 R2 (64 bit). I do not know about the Citrix servers.
>
> I will try the GP mandatory assign .
>
> Thanks,

 

[Glenn]

Re: RDP / Terminal Services / Mandatory Profiles

I will try that and post the outcome.

Thanks for your help.
--
Glenn W. Johnson
System Support Manager
Miami Dade County, DERM


"Jeff Pitsch" wrote:

> Is it possible for you to work with your Citrix team then to have them
> locate the profile path in Group Policy instead of user accounts?
>
> Jeff Pitsch
> Microsoft MVP - Terminal Services
>
> Glenn wrote:
> > I tried the "Only Allow Local User Profiles" and that did not work. The
> > servers are in different OU. The Citrix one are in an OU I do not have
> > control over but I can control the OU that my servers are located.
> >
> > We are runing a Windows 2008 AD (managed by another group) and my servers
> > are 2003 R2 (64 bit). I do not know about the Citrix servers.
> >
> > I will try the GP mandatory assign .
> >
> > Thanks,
>

 

[Jeff Pitsch]

Re: RDP / Terminal Services / Mandatory Profiles

One thing I forgot to ask was, when you tried the new gpo settings (both
the local policies and terminal services profile) did you run an rsop to
make sure that the settings had been propagated to the server?

Jeff Pitsch
Microsoft MVP - Terminal Services

Glenn wrote:
> I will try that and post the outcome.
>
> Thanks for your help.

 

[Glenn]

Re: RDP / Terminal Services / Mandatory Profiles

Yes I did and the polices got set properly.
--
Glenn W. Johnson
System Support Manager
Miami Dade County, DERM


"Jeff Pitsch" wrote:

> One thing I forgot to ask was, when you tried the new gpo settings (both
> the local policies and terminal services profile) did you run an rsop to
> make sure that the settings had been propagated to the server?
>
> Jeff Pitsch
> Microsoft MVP - Terminal Services
>
> Glenn wrote:
> > I will try that and post the outcome.
> >
> > Thanks for your help.
>