Roaming profiles for external domain

  • Thread starter Thread starter Ste
  • Start date Start date
S

Ste

Guest
Hello all,

I've a domain (A) with two terminal servers as frontend for access to
some applications. My domain has an external with domain B to allow
users in domain B to login in my domain.

Now user user01@B logon in my terminal server. How can I make this
user to have a roaming profiles? I read I'ev to setup using a GPO in
domain B.

Problem is that in domain B there's another Terminal Server that do not
need roaming profiles.

So, how can I create a group policy that remains applicable only during
logon in my terminal services?


Thanks
Stefano
 
Re: Roaming profiles for external domain

You can do that by using loopback processing of the GPO.

Put you TS in a separate OU (don't put any user accounts here)
Create a GPO and link it to this OU

Configure the folowing settings:

Computer Configuration - Administrative Templates - System - Group
Policy
"User Group Policy loopback processing mode" - "Replace"

Computer Configuration - Administrative templates - Windows
Components - Terminal Services
"Set path for TS roaming profiles"

_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

Ste <ste@i.net.it> wrote on 08 feb 2008 in
microsoft.public.windows.terminal_services:

> Hello all,
>
> I've a domain (A) with two terminal servers as frontend for
> access to some applications. My domain has an external with
> domain B to allow users in domain B to login in my domain.
>
> Now user user01@B logon in my terminal server. How can I make
> this user to have a roaming profiles? I read I'ev to setup using
> a GPO in domain B.
>
> Problem is that in domain B there's another Terminal Server that
> do not need roaming profiles.
>
> So, how can I create a group policy that remains applicable only
> during logon in my terminal services?
>
>
> Thanks
> Stefano
 
Re: Roaming profiles for external domain

Vera Noest [MVP] ha scritto:
> You can do that by using loopback processing of the GPO.
>
> Put you TS in a separate OU (don't put any user accounts here)
> Create a GPO and link it to this OU
>
> Configure the folowing settings:
>
> Computer Configuration - Administrative Templates - System - Group
> Policy
> "User Group Policy loopback processing mode" - "Replace"
>
> Computer Configuration - Administrative templates - Windows
> Components - Terminal Services
> "Set path for TS roaming profiles"

Hi Vera,

these steps have to be done in which domain? the domain belogs to the
users or the domains belong to the TS ?

Thanks
Stefano
 
Re: Roaming profiles for external domain

The settings are Computer Configuration settings, so you apply them
to the TS account, not the user accounts.
Since you have to link the policy to the OU which contains the TS
account, it must be in the domain where the TS is located.
What the GPO does is to force *every* user who connects to the TS
to use a roaming TS profile. So before you implement this, check if
this is really what you want and test it out.
_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

Ste <ste@i.net.it> wrote on 09 feb 2008 in
microsoft.public.windows.terminal_services:

> Vera Noest [MVP] ha scritto:
>> You can do that by using loopback processing of the GPO.
>>
>> Put you TS in a separate OU (don't put any user accounts here)
>> Create a GPO and link it to this OU
>>
>> Configure the folowing settings:
>>
>> Computer Configuration - Administrative Templates - System -
>> Group Policy
>> "User Group Policy loopback processing mode" - "Replace"
>>
>> Computer Configuration - Administrative templates - Windows
>> Components - Terminal Services
>> "Set path for TS roaming profiles"
>
> Hi Vera,
>
> these steps have to be done in which domain? the domain belogs
> to the users or the domains belong to the TS ?
>
> Thanks
> Stefano
 
Back
Top