IE Security via Group Policy for Win2003 TS

[Guest JohanMartinez]

Hi

 

First of all, I'm a novice when it comes to Group Policy. I'm looking to

deploy Custom Level IE security settings for all users that access a

particular TS. I also want the ability to add sites to Trusted Sites so

that all users accessing this TS get those sites added to their Trusted Sites

tab.

 

Would I add these in User Configuration, or Computer Configuration? Also,

would I link this policy to the OU containing my TS users, or the OU

containing my TS?

 

I hope that all made sense, as I think I just confused myself a little.

Thanks in Advance

 

Johan

[Guest Vera Noest [MVP]]

Re: IE Security via Group Policy for Win2003 TS

 

Assuming that you only want to restrict your users when they are

logged on to the TS, not on their own workstations, you cannot use

a GPO linked to the OU which contains the user accounts. So, the

restrictive GPO must be linked to the OU containing your TS.

 

If you want to enforce restrictions for *all* users of the TS, you

can use settings under Computer Configuration. But if you want to

restrict only some users (better: user groups), then you have to

configure the setting under User Configuration. And that means that

you have to change the way GPOs are applied (i.e. it must apply

the User Configuration settings from the GPO linked to the TS,

instead of the normal GPO processing rules, where User

Configuration settings are taken from the GPO linked to the users).

To achieve this, you must configure "loopback processing" of the

restricting GPO. That's found here:

 

Computer Configuration - Administrative Templates - System - Group

Policy

"User Group Policy loopback processing mode" - "Replace"

_________________________________________________________

Vera Noest

MCSE, CCEA, Microsoft MVP - Terminal Server

TS troubleshooting: http://ts.veranoest.net

___ please respond in newsgroup, NOT by private email ___

 

=?Utf-8?B?Sm9oYW5NYXJ0aW5leg==?=

<JohanMartinez@discussions.microsoft.com> wrote on 17 dec 2007 in

microsoft.public.windows.terminal_services:

> Hi

>

> First of all, I'm a novice when it comes to Group Policy. I'm

> looking to deploy Custom Level IE security settings for all

> users that access a particular TS. I also want the ability to

> add sites to Trusted Sites so that all users accessing this TS

> get those sites added to their Trusted Sites tab.

>

> Would I add these in User Configuration, or Computer

> Configuration? Also, would I link this policy to the OU

> containing my TS users, or the OU containing my TS?

>

> I hope that all made sense, as I think I just confused myself a

> little. Thanks in Advance

>

> Johan