AFAIK you want to look for information on "Group Policy loopback feature" to
apply User Configuration GPO settings to users only when they log on to the
Terminal Servers. Try this for a start: http://support.microsoft.com/kb/260370
Why do you need to remove "shutdown" from the users? As long as the users
are locked down (and they should be on a TS) shutdown only gives them the
logout option anyway. If they can shutdown the TS then they have admin
rights which is a no-no on a TS.
Daniel Jewel wrote:
> Hi all,
> this is a bit urgent...
> SBS 2003 Premum R2, 2 NICs all patched up...
> I need to create a GP for a specific Member Server (Terminal Server)
> and for a specific Security Group.
> I tried following some articles from Microsoft but to this point have
> not been successful.
> Here is what I did so far... Created an OU, placed the Terminal Server
> Created a GP and linked it right under domainName.local and gave it
> the name TS Policy.
> I get the effects I'm after (remove shutdown from these users) but it
> is also removed from their workstations.
> I assume it's because I'm failing to place it correctly and/or not
> knowing how to work with the inheritance
> Any help is greatly appreciated.