IE Security via Group Policy for Win2003 TS

[JohanMartinez]

Hi

First of all, I'm a novice when it comes to Group Policy. I'm looking to
deploy Custom Level IE security settings for all users that access a
particular TS. I also want the ability to add sites to Trusted Sites so
that all users accessing this TS get those sites added to their Trusted Sites
tab.

Would I add these in User Configuration, or Computer Configuration? Also,
would I link this policy to the OU containing my TS users, or the OU
containing my TS?

I hope that all made sense, as I think I just confused myself a little.
Thanks in Advance

Johan

 

[Vera Noest [MVP]]

Re: IE Security via Group Policy for Win2003 TS

Assuming that you only want to restrict your users when they are
logged on to the TS, not on their own workstations, you cannot use
a GPO linked to the OU which contains the user accounts. So, the
restrictive GPO must be linked to the OU containing your TS.

If you want to enforce restrictions for *all* users of the TS, you
can use settings under Computer Configuration. But if you want to
restrict only some users (better: user groups), then you have to
configure the setting under User Configuration. And that means that
you have to change the way GPOs are applied (i.e. it must apply
the User Configuration settings from the GPO linked to the TS,
instead of the normal GPO processing rules, where User
Configuration settings are taken from the GPO linked to the users).
To achieve this, you must configure "loopback processing" of the
restricting GPO. That's found here:

Computer Configuration - Administrative Templates - System - Group
Policy
"User Group Policy loopback processing mode" - "Replace"
_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

=?Utf-8?B?Sm9oYW5NYXJ0aW5leg==?=
<JohanMartinez@discussions.microsoft.com> wrote on 17 dec 2007 in
microsoft.public.windows.terminal_services:

> Hi
>
> First of all, I'm a novice when it comes to Group Policy. I'm
> looking to deploy Custom Level IE security settings for all
> users that access a particular TS. I also want the ability to
> add sites to Trusted Sites so that all users accessing this TS
> get those sites added to their Trusted Sites tab.
>
> Would I add these in User Configuration, or Computer
> Configuration? Also, would I link this policy to the OU
> containing my TS users, or the OU containing my TS?
>
> I hope that all made sense, as I think I just confused myself a
> little. Thanks in Advance
>
> Johan