Guest Glenn Posted October 5, 2008 Posted October 5, 2008 I have users that connect to a Citrix environment and use the Terminal Server tab on the AD User Properties to setup thier profile. Now a couple of these users need to connect to a Windows Server 2003 R2 (64bit) to run some processes using Remote Desktop (RDP). The problem is that thier profile for the Citrix servers get loaded as a mandatory profile on the server. I want them to get a local profile and ignore the other settings. I have looked at GP and Local Security settings without any success. There are a some settings under Computer>Admin>Profiles>Windows>Terminal Services>Profiles I tried but did not work. Thanks, -- Glenn W. Johnson System Support Manager Miami Dade County, DERM
Guest Jeff Pitsch Posted October 5, 2008 Posted October 5, 2008 Re: RDP / Terminal Services / Mandatory Profiles Look under Computer, Policies, Admin Templates, System, user Profiles, and the setting you want is "Only allow local user profiles". Jeff Pitsch Microsoft MVP - Terminal Services Glenn wrote: > I have users that connect to a Citrix environment and use the Terminal Server > tab on the AD User Properties to setup thier profile. Now a couple of these > users need to connect to a Windows Server 2003 R2 (64bit) to run some > processes using Remote Desktop (RDP). > > The problem is that thier profile for the Citrix servers get loaded as a > mandatory profile on the server. I want them to get a local profile and > ignore the other settings. I have looked at GP and Local Security settings > without any success. There are a some settings under > Computer>Admin>Profiles>Windows>Terminal Services>Profiles I tried but did > not work. > > Thanks,
Guest Jeff Pitsch Posted October 5, 2008 Posted October 5, 2008 Re: RDP / Terminal Services / Mandatory Profiles The other option is to split your Citrix servers into their own OU and then use Group Policy to assign mandatory profiles ONLY to that OU. by the way, I gave the path based on Win2k8 above, it should be the same or very close to Win2k3. Jeff Pitsch Microsoft MVP - Terminal Services Glenn wrote: > I have users that connect to a Citrix environment and use the Terminal Server > tab on the AD User Properties to setup thier profile. Now a couple of these > users need to connect to a Windows Server 2003 R2 (64bit) to run some > processes using Remote Desktop (RDP). > > The problem is that thier profile for the Citrix servers get loaded as a > mandatory profile on the server. I want them to get a local profile and > ignore the other settings. I have looked at GP and Local Security settings > without any success. There are a some settings under > Computer>Admin>Profiles>Windows>Terminal Services>Profiles I tried but did > not work. > > Thanks,
Guest Glenn Posted October 6, 2008 Posted October 6, 2008 Re: RDP / Terminal Services / Mandatory Profiles I tried the "Only Allow Local User Profiles" and that did not work. The servers are in different OU. The Citrix one are in an OU I do not have control over but I can control the OU that my servers are located. We are runing a Windows 2008 AD (managed by another group) and my servers are 2003 R2 (64 bit). I do not know about the Citrix servers. I will try the GP mandatory assign . Thanks, -- Glenn W. Johnson System Support Manager Miami Dade County, DERM "Jeff Pitsch" wrote: > The other option is to split your Citrix servers into their own OU and > then use Group Policy to assign mandatory profiles ONLY to that OU. > > by the way, I gave the path based on Win2k8 above, it should be the same > or very close to Win2k3. > > Jeff Pitsch > Microsoft MVP - Terminal Services > > Glenn wrote: > > I have users that connect to a Citrix environment and use the Terminal Server > > tab on the AD User Properties to setup thier profile. Now a couple of these > > users need to connect to a Windows Server 2003 R2 (64bit) to run some > > processes using Remote Desktop (RDP). > > > > The problem is that thier profile for the Citrix servers get loaded as a > > mandatory profile on the server. I want them to get a local profile and > > ignore the other settings. I have looked at GP and Local Security settings > > without any success. There are a some settings under > > Computer>Admin>Profiles>Windows>Terminal Services>Profiles I tried but did > > not work. > > > > Thanks, >
Guest Jeff Pitsch Posted October 6, 2008 Posted October 6, 2008 Re: RDP / Terminal Services / Mandatory Profiles Is it possible for you to work with your Citrix team then to have them locate the profile path in Group Policy instead of user accounts? Jeff Pitsch Microsoft MVP - Terminal Services Glenn wrote: > I tried the "Only Allow Local User Profiles" and that did not work. The > servers are in different OU. The Citrix one are in an OU I do not have > control over but I can control the OU that my servers are located. > > We are runing a Windows 2008 AD (managed by another group) and my servers > are 2003 R2 (64 bit). I do not know about the Citrix servers. > > I will try the GP mandatory assign . > > Thanks,
Guest Glenn Posted October 6, 2008 Posted October 6, 2008 Re: RDP / Terminal Services / Mandatory Profiles I will try that and post the outcome. Thanks for your help. -- Glenn W. Johnson System Support Manager Miami Dade County, DERM "Jeff Pitsch" wrote: > Is it possible for you to work with your Citrix team then to have them > locate the profile path in Group Policy instead of user accounts? > > Jeff Pitsch > Microsoft MVP - Terminal Services > > Glenn wrote: > > I tried the "Only Allow Local User Profiles" and that did not work. The > > servers are in different OU. The Citrix one are in an OU I do not have > > control over but I can control the OU that my servers are located. > > > > We are runing a Windows 2008 AD (managed by another group) and my servers > > are 2003 R2 (64 bit). I do not know about the Citrix servers. > > > > I will try the GP mandatory assign . > > > > Thanks, >
Guest Jeff Pitsch Posted October 6, 2008 Posted October 6, 2008 Re: RDP / Terminal Services / Mandatory Profiles One thing I forgot to ask was, when you tried the new gpo settings (both the local policies and terminal services profile) did you run an rsop to make sure that the settings had been propagated to the server? Jeff Pitsch Microsoft MVP - Terminal Services Glenn wrote: > I will try that and post the outcome. > > Thanks for your help.
Guest Glenn Posted October 6, 2008 Posted October 6, 2008 Re: RDP / Terminal Services / Mandatory Profiles Yes I did and the polices got set properly. -- Glenn W. Johnson System Support Manager Miami Dade County, DERM "Jeff Pitsch" wrote: > One thing I forgot to ask was, when you tried the new gpo settings (both > the local policies and terminal services profile) did you run an rsop to > make sure that the settings had been propagated to the server? > > Jeff Pitsch > Microsoft MVP - Terminal Services > > Glenn wrote: > > I will try that and post the outcome. > > > > Thanks for your help. >
Recommended Posts