Hi all,

this is a bit urgent...

SBS 2003 Premum R2, 2 NICs all patched up...

I need to create a GP for a specific Member Server (Terminal Server) and for
a specific Security Group.

I tried following some articles from Microsoft but to this point have not
been successful.
Here is what I did so far... Created an OU, placed the Terminal Server
there.
Created a GP and linked it right under domainName.local and gave it the name
TS Policy.
I get the effects I'm after (remove shutdown from these users) but it is
also removed from their workstations.
I assume it's because I'm failing to place it correctly and/or not knowing
how to work with the inheritance

Any help is greatly appreciated.



Dan

AFAIK you want to look for information on "Group Policy loopback feature" to
apply User Configuration GPO settings to users only when they log on to the
Terminal Servers. Try this for a start:

http://support.microsoft.com/kb/260370

Why do you need to remove "shutdown" from the users? As long as the users
are locked down (and they should be on a TS) shutdown only gives them the
logout option anyway. If they can shutdown the TS then they have admin
rights which is a no-no on a TS.
--
Allan Williams




Daniel Jewel wrote:

> Hi all,
>
> this is a bit urgent...
>
> SBS 2003 Premum R2, 2 NICs all patched up...
>
> I need to create a GP for a specific Member Server (Terminal Server)
> and for a specific Security Group.
>
> I tried following some articles from Microsoft but to this point have
> not been successful.
> Here is what I did so far... Created an OU, placed the Terminal Server
> there.
> Created a GP and linked it right under domainName.local and gave it
> the name TS Policy.
> I get the effects I'm after (remove shutdown from these users) but it
> is also removed from their workstations.
> I assume it's because I'm failing to place it correctly and/or not
> knowing how to work with the inheritance
>
> Any help is greatly appreciated.
>
> Dan

Thanks Al,

I simply do not have loopback processing option under computer
configuration, admin templates, system, group policy...
Do I need to install anything to have it?
Dan

"Al Williams" <donotreplydirect@newsgroup> wrote in message
news:#ybHxRxMKHA.2036@newsgroup

> AFAIK you want to look for information on "Group Policy loopback feature"
> to apply User Configuration GPO settings to users only when they log on to
> the Terminal Servers. Try this for a start:
>
> http://support.microsoft.com/kb/260370
>
> Why do you need to remove "shutdown" from the users? As long as the users
> are locked down (and they should be on a TS) shutdown only gives them the
> logout option anyway. If they can shutdown the TS then they have admin
> rights which is a no-no on a TS.
> --
> Allan Williams
>
>
>
>
> Daniel Jewel wrote:

>> Hi all,
>>
>> this is a bit urgent...
>>
>> SBS 2003 Premum R2, 2 NICs all patched up...
>>
>> I need to create a GP for a specific Member Server (Terminal Server)
>> and for a specific Security Group.
>>
>> I tried following some articles from Microsoft but to this point have
>> not been successful.
>> Here is what I did so far... Created an OU, placed the Terminal Server
>> there.
>> Created a GP and linked it right under domainName.local and gave it
>> the name TS Policy.
>> I get the effects I'm after (remove shutdown from these users) but it
>> is also removed from their workstations.
>> I assume it's because I'm failing to place it correctly and/or not
>> knowing how to work with the inheritance
>>
>> Any help is greatly appreciated.
>>
>> Dan

>
>

Al,

I think I found where loopback processing is....
Am in the process of re-doing the whole thing...will post later.
Thanks,
Dan

"Al Williams" <donotreplydirect@newsgroup> wrote in message
news:#ybHxRxMKHA.2036@newsgroup

> AFAIK you want to look for information on "Group Policy loopback feature"
> to apply User Configuration GPO settings to users only when they log on to
> the Terminal Servers. Try this for a start:
>
> http://support.microsoft.com/kb/260370
>
> Why do you need to remove "shutdown" from the users? As long as the users
> are locked down (and they should be on a TS) shutdown only gives them the
> logout option anyway. If they can shutdown the TS then they have admin
> rights which is a no-no on a TS.
> --
> Allan Williams
>
>
>
>
> Daniel Jewel wrote:

>> Hi all,
>>
>> this is a bit urgent...
>>
>> SBS 2003 Premum R2, 2 NICs all patched up...
>>
>> I need to create a GP for a specific Member Server (Terminal Server)
>> and for a specific Security Group.
>>
>> I tried following some articles from Microsoft but to this point have
>> not been successful.
>> Here is what I did so far... Created an OU, placed the Terminal Server
>> there.
>> Created a GP and linked it right under domainName.local and gave it
>> the name TS Policy.
>> I get the effects I'm after (remove shutdown from these users) but it
>> is also removed from their workstations.
>> I assume it's because I'm failing to place it correctly and/or not
>> knowing how to work with the inheritance
>>
>> Any help is greatly appreciated.
>>
>> Dan

>
>

"Created a GP and linked it right under domainName.local and gave it the
name TS Policy."

Wrong place. Use loopback processing, and apply the GPO to the new OU into
which you have placed the terminal server.

Gregg


"Daniel Jewel" <cyberdudeiq@newsgroup> wrote in message
news:uRrtGJxMKHA.3284@newsgroup

> Hi all,
>
> this is a bit urgent...
>
> SBS 2003 Premum R2, 2 NICs all patched up...
>
> I need to create a GP for a specific Member Server (Terminal Server) and
> for a specific Security Group.
>
> I tried following some articles from Microsoft but to this point have not
> been successful.
> Here is what I did so far... Created an OU, placed the Terminal Server
> there.
> Created a GP and linked it right under domainName.local and gave it the
> name TS Policy.
> I get the effects I'm after (remove shutdown from these users) but it is
> also removed from their workstations.
> I assume it's because I'm failing to place it correctly and/or not knowing
> how to work with the inheritance
>
> Any help is greatly appreciated.
>
> Dan

Many thanks Gregg,

That's exactly what I learnt and it did work as expeceted...

Thanks again for the helping hand,

Dan

"Gregg Hill" <greggmhill at please do not spam me at yahoo dot com> escreveu
na notícia da mensagem:un2UzM1MKHA.3384@newsgroup

> "Created a GP and linked it right under domainName.local and gave it the
> name TS Policy."
>
> Wrong place. Use loopback processing, and apply the GPO to the new OU into
> which you have placed the terminal server.
>
> Gregg
>
>
> "Daniel Jewel" <cyberdudeiq@newsgroup> wrote in message
> news:uRrtGJxMKHA.3284@newsgroup

>> Hi all,
>>
>> this is a bit urgent...
>>
>> SBS 2003 Premum R2, 2 NICs all patched up...
>>
>> I need to create a GP for a specific Member Server (Terminal Server) and
>> for a specific Security Group.
>>
>> I tried following some articles from Microsoft but to this point have not
>> been successful.
>> Here is what I did so far... Created an OU, placed the Terminal Server
>> there.
>> Created a GP and linked it right under domainName.local and gave it the
>> name TS Policy.
>> I get the effects I'm after (remove shutdown from these users) but it is
>> also removed from their workstations.
>> I assume it's because I'm failing to place it correctly and/or not
>> knowing how to work with the inheritance
>>
>> Any help is greatly appreciated.
>>
>> Dan

>
>