Roaming profiles for external domain

[Guest Ste]

Hello all,

 

I've a domain (A) with two terminal servers as frontend for access to

some applications. My domain has an external with domain B to allow

users in domain B to login in my domain.

 

Now user user01@B logon in my terminal server. How can I make this

user to have a roaming profiles? I read I'ev to setup using a GPO in

domain B.

 

Problem is that in domain B there's another Terminal Server that do not

need roaming profiles.

 

So, how can I create a group policy that remains applicable only during

logon in my terminal services?

 

 

Thanks

Stefano

[Guest Vera Noest [MVP]]

Re: Roaming profiles for external domain

 

You can do that by using loopback processing of the GPO.

 

Put you TS in a separate OU (don't put any user accounts here)

Create a GPO and link it to this OU

 

Configure the folowing settings:

 

Computer Configuration - Administrative Templates - System - Group

Policy

"User Group Policy loopback processing mode" - "Replace"

 

Computer Configuration - Administrative templates - Windows

Components - Terminal Services

"Set path for TS roaming profiles"

 

_________________________________________________________

Vera Noest

MCSE, CCEA, Microsoft MVP - Terminal Server

TS troubleshooting: http://ts.veranoest.net

___ please respond in newsgroup, NOT by private email ___

 

Ste <ste@i.net.it> wrote on 08 feb 2008 in

microsoft.public.windows.terminal_services:

> Hello all,

>

> I've a domain (A) with two terminal servers as frontend for

> access to some applications. My domain has an external with

> domain B to allow users in domain B to login in my domain.

>

> Now user user01@B logon in my terminal server. How can I make

> this user to have a roaming profiles? I read I'ev to setup using

> a GPO in domain B.

>

> Problem is that in domain B there's another Terminal Server that

> do not need roaming profiles.

>

> So, how can I create a group policy that remains applicable only

> during logon in my terminal services?

>

>

> Thanks

> Stefano

[Guest Ste]

Re: Roaming profiles for external domain

 

Vera Noest [MVP] ha scritto:

> You can do that by using loopback processing of the GPO.

>

> Put you TS in a separate OU (don't put any user accounts here)

> Create a GPO and link it to this OU

>

> Configure the folowing settings:

>

> Computer Configuration - Administrative Templates - System - Group

> Policy

> "User Group Policy loopback processing mode" - "Replace"

>

> Computer Configuration - Administrative templates - Windows

> Components - Terminal Services

> "Set path for TS roaming profiles"

 

Hi Vera,

 

these steps have to be done in which domain? the domain belogs to the

users or the domains belong to the TS ?

 

Thanks

Stefano

[Guest Vera Noest [MVP]]

Re: Roaming profiles for external domain

 

The settings are Computer Configuration settings, so you apply them

to the TS account, not the user accounts.

Since you have to link the policy to the OU which contains the TS

account, it must be in the domain where the TS is located.

What the GPO does is to force *every* user who connects to the TS

to use a roaming TS profile. So before you implement this, check if

this is really what you want and test it out.

_________________________________________________________

Vera Noest

MCSE, CCEA, Microsoft MVP - Terminal Server

TS troubleshooting: http://ts.veranoest.net

___ please respond in newsgroup, NOT by private email ___

 

Ste <ste@i.net.it> wrote on 09 feb 2008 in

microsoft.public.windows.terminal_services:

> Vera Noest [MVP] ha scritto:

>> You can do that by using loopback processing of the GPO.

>>

>> Put you TS in a separate OU (don't put any user accounts here)

>> Create a GPO and link it to this OU

>>

>> Configure the folowing settings:

>>

>> Computer Configuration - Administrative Templates - System -

>> Group Policy

>> "User Group Policy loopback processing mode" - "Replace"

>>

>> Computer Configuration - Administrative templates - Windows

>> Components - Terminal Services

>> "Set path for TS roaming profiles"

>

> Hi Vera,

>

> these steps have to be done in which domain? the domain belogs

> to the users or the domains belong to the TS ?

>

> Thanks

> Stefano