User has to be in OU for policy to apply

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

I have a group policy setup for a terminal server in it's own OU. I want
This policy to apply to a user when they login to the TS, but not when they
log into their own PC. I created a security group placed the user(s) in this
group, appplied the policy to that group (read and apply, not denying
anyone)

I have OU's for the different departments and they work fine, but the users
are all located underneath the OU for which the policy is linked. For some
reason the Policy in my TS OU will only apply if I move a user to the TS OU.
I can't have a user in two different OUs so I'm not sure what to do. I hope
that makes sense.

Any help would be appreciated!

Kevin

 

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

"Kevin" <sail33811@NOSPAM55.hotmail.com> said

> I have a group policy setup for a terminal server in it's own OU. I want
> This policy to apply to a user when they login to the TS, but not when
> they log into their own PC. I created a security group placed the
> user(s) in this group, appplied the policy to that group (read and
> apply, not denying anyone)
>
> I have OU's for the different departments and they work fine, but the
> users are all located underneath the OU for which the policy is linked.
> For some reason the Policy in my TS OU will only apply if I move a user
> to the TS OU. I can't have a user in two different OUs so I'm not sure
> what to do. I hope that makes sense.
>

You need to set the GPO in the terminal services OU as a loopback policy.
This will cause all settings (including User settings) to be applied, even
though only computers exist in the OU.

http://support.microsoft.com/default.aspx?scid=kb;EN-US;231287

Andy.

 

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

I turned on the loopback policy, but it's still not working. I'm not sure
what's going on???

Thanks
Kevin


"Andrew Mitchell" <amitchell@removecasey.vic.gov.au> wrote in message
news:Xns94DC8EAC4A47casey01@207.46.248.16...
> "Kevin" <sail33811@NOSPAM55.hotmail.com> said
>
> > I have a group policy setup for a terminal server in it's own OU. I want
> > This policy to apply to a user when they login to the TS, but not when
> > they log into their own PC. I created a security group placed the
> > user(s) in this group, appplied the policy to that group (read and
> > apply, not denying anyone)
> >
> > I have OU's for the different departments and they work fine, but the
> > users are all located underneath the OU for which the policy is linked.
> > For some reason the Policy in my TS OU will only apply if I move a user
> > to the TS OU. I can't have a user in two different OUs so I'm not sure
> > what to do. I hope that makes sense.
> >
>
> You need to set the GPO in the terminal services OU as a loopback policy.
> This will cause all settings (including User settings) to be applied, even
> though only computers exist in the OU.
>
> http://support.microsoft.com/default.aspx?scid=kb;EN-US;231287
>
> Andy.