RDP / Terminal Services / Mandatory Profiles

[Guest Glenn]

I have users that connect to a Citrix environment and use the Terminal Server

tab on the AD User Properties to setup thier profile. Now a couple of these

users need to connect to a Windows Server 2003 R2 (64bit) to run some

processes using Remote Desktop (RDP).

 

The problem is that thier profile for the Citrix servers get loaded as a

mandatory profile on the server. I want them to get a local profile and

ignore the other settings. I have looked at GP and Local Security settings

without any success. There are a some settings under

Computer>Admin>Profiles>Windows>Terminal Services>Profiles I tried but did

not work.

 

Thanks,

--

Glenn W. Johnson

System Support Manager

Miami Dade County, DERM

[Guest Jeff Pitsch]

Re: RDP / Terminal Services / Mandatory Profiles

 

Look under Computer, Policies, Admin Templates, System, user Profiles,

and the setting you want is "Only allow local user profiles".

 

Jeff Pitsch

Microsoft MVP - Terminal Services

 

Glenn wrote:

> I have users that connect to a Citrix environment and use the Terminal Server

> tab on the AD User Properties to setup thier profile. Now a couple of these

> users need to connect to a Windows Server 2003 R2 (64bit) to run some

> processes using Remote Desktop (RDP).

>

> The problem is that thier profile for the Citrix servers get loaded as a

> mandatory profile on the server. I want them to get a local profile and

> ignore the other settings. I have looked at GP and Local Security settings

> without any success. There are a some settings under

> Computer>Admin>Profiles>Windows>Terminal Services>Profiles I tried but did

> not work.

>

> Thanks,

[Guest Jeff Pitsch]

Re: RDP / Terminal Services / Mandatory Profiles

 

The other option is to split your Citrix servers into their own OU and

then use Group Policy to assign mandatory profiles ONLY to that OU.

 

by the way, I gave the path based on Win2k8 above, it should be the same

or very close to Win2k3.

 

Jeff Pitsch

Microsoft MVP - Terminal Services

 

Glenn wrote:

> I have users that connect to a Citrix environment and use the Terminal Server

> tab on the AD User Properties to setup thier profile. Now a couple of these

> users need to connect to a Windows Server 2003 R2 (64bit) to run some

> processes using Remote Desktop (RDP).

>

> The problem is that thier profile for the Citrix servers get loaded as a

> mandatory profile on the server. I want them to get a local profile and

> ignore the other settings. I have looked at GP and Local Security settings

> without any success. There are a some settings under

> Computer>Admin>Profiles>Windows>Terminal Services>Profiles I tried but did

> not work.

>

> Thanks,

[Guest Glenn]

Re: RDP / Terminal Services / Mandatory Profiles

 

I tried the "Only Allow Local User Profiles" and that did not work. The

servers are in different OU. The Citrix one are in an OU I do not have

control over but I can control the OU that my servers are located.

 

We are runing a Windows 2008 AD (managed by another group) and my servers

are 2003 R2 (64 bit). I do not know about the Citrix servers.

 

I will try the GP mandatory assign .

 

Thanks,

--

Glenn W. Johnson

System Support Manager

Miami Dade County, DERM

 

 

"Jeff Pitsch" wrote:

> The other option is to split your Citrix servers into their own OU and

> then use Group Policy to assign mandatory profiles ONLY to that OU.

>

> by the way, I gave the path based on Win2k8 above, it should be the same

> or very close to Win2k3.

>

> Jeff Pitsch

> Microsoft MVP - Terminal Services

>

> Glenn wrote:

> > I have users that connect to a Citrix environment and use the Terminal Server

> > tab on the AD User Properties to setup thier profile. Now a couple of these

> > users need to connect to a Windows Server 2003 R2 (64bit) to run some

> > processes using Remote Desktop (RDP).

> >

> > The problem is that thier profile for the Citrix servers get loaded as a

> > mandatory profile on the server. I want them to get a local profile and

> > ignore the other settings. I have looked at GP and Local Security settings

> > without any success. There are a some settings under

> > Computer>Admin>Profiles>Windows>Terminal Services>Profiles I tried but did

> > not work.

> >

> > Thanks,

>

[Guest Jeff Pitsch]

Re: RDP / Terminal Services / Mandatory Profiles

 

Is it possible for you to work with your Citrix team then to have them

locate the profile path in Group Policy instead of user accounts?

 

Jeff Pitsch

Microsoft MVP - Terminal Services

 

Glenn wrote:

> I tried the "Only Allow Local User Profiles" and that did not work. The

> servers are in different OU. The Citrix one are in an OU I do not have

> control over but I can control the OU that my servers are located.

>

> We are runing a Windows 2008 AD (managed by another group) and my servers

> are 2003 R2 (64 bit). I do not know about the Citrix servers.

>

> I will try the GP mandatory assign .

>

> Thanks,

[Guest Glenn]

Re: RDP / Terminal Services / Mandatory Profiles

 

I will try that and post the outcome.

 

Thanks for your help.

--

Glenn W. Johnson

System Support Manager

Miami Dade County, DERM

 

 

"Jeff Pitsch" wrote:

> Is it possible for you to work with your Citrix team then to have them

> locate the profile path in Group Policy instead of user accounts?

>

> Jeff Pitsch

> Microsoft MVP - Terminal Services

>

> Glenn wrote:

> > I tried the "Only Allow Local User Profiles" and that did not work. The

> > servers are in different OU. The Citrix one are in an OU I do not have

> > control over but I can control the OU that my servers are located.

> >

> > We are runing a Windows 2008 AD (managed by another group) and my servers

> > are 2003 R2 (64 bit). I do not know about the Citrix servers.

> >

> > I will try the GP mandatory assign .

> >

> > Thanks,

>

[Guest Jeff Pitsch]

Re: RDP / Terminal Services / Mandatory Profiles

 

One thing I forgot to ask was, when you tried the new gpo settings (both

the local policies and terminal services profile) did you run an rsop to

make sure that the settings had been propagated to the server?

 

Jeff Pitsch

Microsoft MVP - Terminal Services

 

Glenn wrote:

> I will try that and post the outcome.

>

> Thanks for your help.

[Guest Glenn]

Re: RDP / Terminal Services / Mandatory Profiles

 

Yes I did and the polices got set properly.

--

Glenn W. Johnson

System Support Manager

Miami Dade County, DERM

 

 

"Jeff Pitsch" wrote:

> One thing I forgot to ask was, when you tried the new gpo settings (both

> the local policies and terminal services profile) did you run an rsop to

> make sure that the settings had been propagated to the server?

>

> Jeff Pitsch

> Microsoft MVP - Terminal Services

>

> Glenn wrote:

> > I will try that and post the outcome.

> >

> > Thanks for your help.

>