The GPTalk Mailing List

The GPTALK mailing list is where you can send and receive email related to Windows Group Policy. You must subscribe to the list to send and receive mail from the list. The purpose of the list is to provide a forum for asking and answering technical questions related to Group Policy. Any question is fair game as long as it is related to Windows Group Policy. The Archives for this list can be found on this page.

List Posts

Unanswered Active Topics

Forums Search

Forums >GPTalk >GPTalk Mailing List

Subject: [gptalk] Lockdown Policy on Terminal Server

Prev Next

You are not authorized to post a reply.

Author

Messages

wmcdonald

Posts:1

01/29/2009 4:28 PM
A TS policy only works for me if it is applied to the Authenticated Users group, but this applies the policy to all users, including administrators, even if I have admins set to deny applying policy. If I apply the group policy to another group, TS_App_Users, and remove Authenticated users or even just uncheck Apply Policy under Authenticated Users, then it won't get applied at all. How is this supposed to work? I think I may have discovered my problem. I found this with a search engine: Computers are members of the Authenticated Users group. If you remove Authenticated Users from the list on the Scope tab and you want the GPO to apply to a computer, you must specifically ensure that the computer belongs to a group that is included in the Security Filtering section on the Scope tab. After adding my TS's to a group, and adding that group to the lockdown policy it seems to work correctly now. Regards, Bill McDonald Systems Administrator II Ebara Technologies, Inc. 51 Main Avenue Sacramento, CA 95838 Direct: (916) 561-4865 Fax: (916) 920-5066 xxxxxxxxxxxxxxxx

You are not authorized to post a reply.

Forums >GPTalk >GPTalk Mailing List > [gptalk] Lockdown Policy on Terminal Server

ActiveForums 3.7

Ads

The GPTalk Mailing List

List Posts

Members

Ads