Sure. Most TS' are configured to use loopback policy. This
is per-computer policy you set in Admin. Templates that would apply to an OU
containing TS servers. What setting a machine for loopback says is, "when a user
logs into this TS, ignore their "normal" user policy settings and instead apply
the user settings that are contained in the GPOs that apply to the computer (in
this case, the TS servers)". Loopback comes with two modes. The first is
replace, which is what I just described, where the user's policies are
completely replaced. The second is "merge", which means, first run the user's
normal user policies then run the computer's user policies. If the latter
overwrites the former, then the computer policies "win".
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Christine Allen
Sent: Tuesday, June 06, 2006 8:30 AM
To: [email protected]
Subject: RE: [ActiveDir] GPO Screen Saver
It is linked to the Domain and has been in place for about
2 years. I does filter down to our servers, which I liked. What's
weird is this just started happening and I'm not sure what
changed.
Can you explain a bit more about "(unless you are using
loopback in replace mode) unless it had a security filter preventing
that"
-Christine
Christine N. Allen
Systems Engineer
BMC HealthNet Plan
2 Copley Place
Boston, MA 02116
617-748-6034
617-293-4407
[EMAIL PROTECTED]
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darren Mar-Elia
Sent: Tuesday, June 06, 2006 11:09 AM
To: [email protected]
Subject: RE: [ActiveDir] GPO Screen Saver
Hey Christine-
You might want to check and see if something has changed on
the filtering of that GPO. If its linked to the domain then I would guess it
would be applying to all users in the domain, even if they are logged onto a TS
(unless you are using loopback in replace mode) unless it had a security
filter preventing that.
Darren
Darren Mar-Elia
For comprehensive
Windows Group Policy Information, check out www.gpoguy.com-- the best source for GPO tips,
tools and whitepapers. Also check out the Windows
Group Policy Guide, a soup-to-nuts resource for Group Policy
information.
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Christine Allen
Sent: Tuesday, June 06, 2006 7:45 AM
To: [email protected]
Subject: [ActiveDir] GPO Screen Saver
We have a GPO to lock users desktops after 10 mins. However, now it seems to be locking their terminal server sessions. The GPO is at the domain level so our ts servers have the gpo applied to them as well. Could this gpo be locking their ts session as well? This gpo has been in place for a while and this just started happening.
-Christine
Christine N. Allen
Systems Engineer
BMC HealthNet
Plan
2 Copley Place
Boston, MA 02116
617-748-6034
617-293-4407
[EMAIL PROTECTED]
