Home All Groups Group Topic Archive Search About

group policy question on workstation and terminal server for same

Author
8 Jun 2006 10:26 PM
Martin_C
UserA has access to Terminal server and workstation
I want to do the following
UserA can access control panel on workstation
User A can't access control panel on Terminal server

How do I do it?

Author
9 Jun 2006 9:29 AM
Jorge Silva
Hi
try to use loopback policy
Check:
Loopback Processing of Group Policy
http://support.microsoft.com/?id=231287

Loopback processing with merge or replace
http://technet2.microsoft.com/WindowsServer/en/Library/abe2b1a9-975f-4b2f-b771-9e6a903e97db1033.mspx?mfr=true

--
I hope that the information above helps you

Good Luck
Jorge Silva
MCSA
Systems Administrator

Show quoteHide quote
"Martin_C" <Mart***@discussions.microsoft.com> wrote in message
news:75E8B512-36A4-4283-8A3F-3EF2CF7B3241@microsoft.com...
>
> UserA has access to Terminal server and workstation
> I want to do the following
> UserA can access control panel on workstation
> User A can't access control panel on Terminal server
>
> How do I do it?
Author
11 Jun 2006 1:34 PM
Cary Shultz
Martin,

As Jorge suggested, create a GPO that affects the Terminal Server (so, you
would link it to the OU in which the TS System is located) using Loopback
processing.

There is a MSKB Article on this (just make sure that you do not affect the
'Administrator' account).

http://support.microsoft.com/?id=278295
http://support.microsoft.com/?kbid=315675

--
Cary W. Shultz
Roanoke, VA  24012

Show quoteHide quote
"Martin_C" <Mart***@discussions.microsoft.com> wrote in message
news:75E8B512-36A4-4283-8A3F-3EF2CF7B3241@microsoft.com...
>
> UserA has access to Terminal server and workstation
> I want to do the following
> UserA can access control panel on workstation
> User A can't access control panel on Terminal server
>
> How do I do it?
Author
12 Jun 2006 9:51 PM
Martin_C
i'm using sbs2003 .. does this work on it too?

Show quoteHide quote
"Cary Shultz" wrote:

> Martin,
>
> As Jorge suggested, create a GPO that affects the Terminal Server (so, you
> would link it to the OU in which the TS System is located) using Loopback
> processing.
>
> There is a MSKB Article on this (just make sure that you do not affect the
> 'Administrator' account).
>
> http://support.microsoft.com/?id=278295
> http://support.microsoft.com/?kbid=315675
>
> --
> Cary W. Shultz
> Roanoke, VA  24012
>
> "Martin_C" <Mart***@discussions.microsoft.com> wrote in message
> news:75E8B512-36A4-4283-8A3F-3EF2CF7B3241@microsoft.com...
> >
> > UserA has access to Terminal server and workstation
> > I want to do the following
> > UserA can access control panel on workstation
> > User A can't access control panel on Terminal server
> >
> > How do I do it?
>
>
>
Author
12 Jun 2006 10:10 PM
Jorge Silva
If my memory doesn't fail me Windows SBS can't be used as T.S.

Windows SBS can only be used as Terminal Server Licensing.

Windows

--
I hope that the information above helps you

Good Luck
Jorge Silva
MCSA
Systems Administrator

Show quoteHide quote
"Martin_C" <Mart***@discussions.microsoft.com> wrote in message
news:8CED09EB-5FDE-46F0-90F6-4C16D9AD2008@microsoft.com...
> i'm using sbs2003 .. does this work on it too?
>
> "Cary Shultz" wrote:
>
>> Martin,
>>
>> As Jorge suggested, create a GPO that affects the Terminal Server (so,
>> you
>> would link it to the OU in which the TS System is located) using Loopback
>> processing.
>>
>> There is a MSKB Article on this (just make sure that you do not affect
>> the
>> 'Administrator' account).
>>
>> http://support.microsoft.com/?id=278295
>> http://support.microsoft.com/?kbid=315675
>>
>> --
>> Cary W. Shultz
>> Roanoke, VA  24012
>>
>> "Martin_C" <Mart***@discussions.microsoft.com> wrote in message
>> news:75E8B512-36A4-4283-8A3F-3EF2CF7B3241@microsoft.com...
>> >
>> > UserA has access to Terminal server and workstation
>> > I want to do the following
>> > UserA can access control panel on workstation
>> > User A can't access control panel on Terminal server
>> >
>> > How do I do it?
>>
>>
>>
Author
12 Jun 2006 10:30 PM
Martin_C
You are right SBS is running as Licensing Server. i have a member server
running 2003 std as Terminal Server.

I read the mskb articles and I'm a little bit confused.

Do I set the Loopback Processing on DC or on the Termainl Server?



Show quoteHide quote
"Jorge Silva" wrote:

> If my memory doesn't fail me Windows SBS can't be used as T.S.
>
> Windows SBS can only be used as Terminal Server Licensing.
>
> Windows
>
> --
> I hope that the information above helps you
>
> Good Luck
> Jorge Silva
> MCSA
> Systems Administrator
>
> "Martin_C" <Mart***@discussions.microsoft.com> wrote in message
> news:8CED09EB-5FDE-46F0-90F6-4C16D9AD2008@microsoft.com...
> > i'm using sbs2003 .. does this work on it too?
> >
> > "Cary Shultz" wrote:
> >
> >> Martin,
> >>
> >> As Jorge suggested, create a GPO that affects the Terminal Server (so,
> >> you
> >> would link it to the OU in which the TS System is located) using Loopback
> >> processing.
> >>
> >> There is a MSKB Article on this (just make sure that you do not affect
> >> the
> >> 'Administrator' account).
> >>
> >> http://support.microsoft.com/?id=278295
> >> http://support.microsoft.com/?kbid=315675
> >>
> >> --
> >> Cary W. Shultz
> >> Roanoke, VA  24012
> >>
> >> "Martin_C" <Mart***@discussions.microsoft.com> wrote in message
> >> news:75E8B512-36A4-4283-8A3F-3EF2CF7B3241@microsoft.com...
> >> >
> >> > UserA has access to Terminal server and workstation
> >> > I want to do the following
> >> > UserA can access control panel on workstation
> >> > User A can't access control panel on Terminal server
> >> >
> >> > How do I do it?
> >>
> >>
> >>
>
>
>
Author
12 Jun 2006 11:44 PM
Jorge Silva
Best practice is create an OU for the T.S and move the Terminal server into
it, then create a GPO assign to the OU and enable the Loopback Processing
Policy


--
I hope that the information above helps you

Good Luck
Jorge Silva
MCSA
Systems Administrator

Show quoteHide quote
"Martin_C" <Mart***@discussions.microsoft.com> wrote in message
news:DCDDFA1F-9CBA-402B-9535-C75CB69CC446@microsoft.com...
> You are right SBS is running as Licensing Server. i have a member server
> running 2003 std as Terminal Server.
>
> I read the mskb articles and I'm a little bit confused.
>
> Do I set the Loopback Processing on DC or on the Termainl Server?
>
>
>
> "Jorge Silva" wrote:
>
>> If my memory doesn't fail me Windows SBS can't be used as T.S.
>>
>> Windows SBS can only be used as Terminal Server Licensing.
>>
>> Windows
>>
>> --
>> I hope that the information above helps you
>>
>> Good Luck
>> Jorge Silva
>> MCSA
>> Systems Administrator
>>
>> "Martin_C" <Mart***@discussions.microsoft.com> wrote in message
>> news:8CED09EB-5FDE-46F0-90F6-4C16D9AD2008@microsoft.com...
>> > i'm using sbs2003 .. does this work on it too?
>> >
>> > "Cary Shultz" wrote:
>> >
>> >> Martin,
>> >>
>> >> As Jorge suggested, create a GPO that affects the Terminal Server (so,
>> >> you
>> >> would link it to the OU in which the TS System is located) using
>> >> Loopback
>> >> processing.
>> >>
>> >> There is a MSKB Article on this (just make sure that you do not affect
>> >> the
>> >> 'Administrator' account).
>> >>
>> >> http://support.microsoft.com/?id=278295
>> >> http://support.microsoft.com/?kbid=315675
>> >>
>> >> --
>> >> Cary W. Shultz
>> >> Roanoke, VA  24012
>> >>
>> >> "Martin_C" <Mart***@discussions.microsoft.com> wrote in message
>> >> news:75E8B512-36A4-4283-8A3F-3EF2CF7B3241@microsoft.com...
>> >> >
>> >> > UserA has access to Terminal server and workstation
>> >> > I want to do the following
>> >> > UserA can access control panel on workstation
>> >> > User A can't access control panel on Terminal server
>> >> >
>> >> > How do I do it?
>> >>
>> >>
>> >>
>>
>>
>>