Question about new GPO policy

[Avari]

As Per Document: How to lock down a Windows Server 2003 or Windows 2000
Terminal Server session - http://support.microsoft.com/kb/278295

I have created a new OU and placed all TS/Citrix servers in this OU. I have
Block Inheritance in this OU. Following instructions on the above document I
have created and linked the GPO to the OU where the users reside, I have
implemented a loopback policy to lockdown user sessions on Terminal
Server/Citrix.

Using a test user the GPO works great as I wanted on the TS/Citrix server,
however I've just logged onto Windows XP PC and the GPO/policy is being
applied to desktops
I only want the GPO/policy applied to Terminal Server/Citrix server
sessions, can you please advise.

Many thanks

 

[Florian Frommherz [MVP]]

Re: Question about new GPO policy

Howdie!

Avari schrieb:
> I have created a new OU and placed all TS/Citrix servers in this OU. I have
> Block Inheritance in this OU. Following instructions on the above document I
> have created and linked the GPO to the OU where the users reside, I have
> implemented a loopback policy to lockdown user sessions on Terminal
> Server/Citrix.
>
> Using a test user the GPO works great as I wanted on the TS/Citrix server,
> however I've just logged onto Windows XP PC and the GPO/policy is being
> applied to desktops
> I only want the GPO/policy applied to Terminal Server/Citrix server
> sessions, can you please advise.

If I understood you right, you need to make the settings that users
shall be receiving when connecting to the Terminal Servers, at the
TS/Citrix server's OU.

For further information, see:
http://www.frickelsoft.net/blog/?p=22

cheers,

Florian
--
Microsoft MVP - Windows Server - Group Policy.
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.