Home > IT Answers > Storage > terminal server and gpo
Help

Question

Asked:
Asked By:
Aug 5 2006   5:01 PM GMT
drorbeny   0 pts.

terminal server and gpo


Disaster Recovery, Network security, Firewalls, Intrusion management, Incident response, Forensics, Wireless, Security, Servers, Identity & Access Management, Digital certificates, provisioning, Biometrics, E-business, Career development, Security Program Management, Compliance, Risk management, Policies, Data analysis, Current threats, Viruses, worms, Hacking, Spyware, Trojans, backdoors, human factors, McAfee, Symantec, Application security, Encryption, Database, Secure Coding, Platform Security, vulnerability management, patching, configuration, PEN testing, Project management, Partner facing, Business/IT alignment, VPN, Outsourcing, Exchange security, Web security, Access control, Browsers, SSL/TLS, filtering, Brightmail, CipherTrust, ClearSwift, MessageLabs, Postini, Rockliffe, SpamAssassin, SurfControl, TrendMicro, CRM, Single sign-on, Spam, Instant Messaging, Security tokens, Exchange

i have a server 2003 that configure as a terminal server, and i want implement a strict acess to this server from client (xp pro) to that server, i create ou that called "for terminal users" and create for that ou a gpo, now,, i want to know how should i change the gpo to achive the next goals: 1. all user that connect to the terminal will get a same desktop and same icons. but i want that when the same user's connect to them xp they get a cusomize icon and desktop as they wish
2 how i redirect my document's of users to server?
3 can i apply a gpo to some user in the "for terminal users" ou and in the same time apply other gpo to that users' ? there is no conflict?
4 how i configure outlook for users that when they connect to the terminal the outlook will open up like they in the desktop ?
thanks a lot dror

Subscribe to Alerts! Get questions and answers delivered to your Inbox.


E-mail me updates on this question



   SUBSCRIBE

hidden modal window
Help

Answer Wiki (Improve, edit or add to this answer)

IMPROVE THIS ANSWER
View History
 RATE THIS ANSWER
0
Click to Vote:
  •   0
  •  0
Last Answered: Aug 6 2006  9:49 AM GMT  by MrGee62   0 pts.




I have been using a program called ScriptLogic that addresses what you wish to accomplish. I am able to set up desktops, outlook settings and other profile type settings that you can customize by user, groups, and even the type of login source (OS, workstation, server, etc... )

Check it out at ScriptLogic.com. I am not a representative of the company. I have just been very pleased with how this program has made managing my network so easy!

A lot of the settings in ScriptLogic can be configured via login scripts and roaming profiles. This program, I have found, is the best way to simplify managing login tasks.

Gregg
  • AddThis Social Bookmark Button

Browse more Questions and Answers on Storage, Networking and Security.

Looking for relevant Storage Whitepapers? Visit the SearchStorage.com Research Library.


RSS - Discussions Help

Discuss This Answer


You must be logged-in to discuss a question. Log-in/Register

petroleumman   0 pts.  |   Aug 7 2006  11:53AM GMT

Hello,

ScriptLogic is a great software solution that will tackle most of your needs very easily without a doubt. It’s certainly worth the investment. Now if you don’t have a budget for ScriptLogic, there are ways to accomplish what you want to do without it.

First the users desktop environment. You can accomplish this task by creating either a roaming or mandatory profile and assigning it as the users Terminal Services profile. Assign TS profiles on the users propertie sheet, Terminal Services Profile tab. When choosing a profile type (roaming or mandatory) remember that a mandatory profile forces everyone to use the same settings (desktop icons, shortcuts etc.)without the ability to permanently change them. A roaming profile will allow each user to customize there desktops.

Folder redirection can be accomplished using custom logon scripts which can be assigned to each user in AD, or through GP settings. Do a search using keyword folder redirection and you should find several postings describing how to do this.

Group Policy is applied to objects such as a computer, an OU, a domain or site but not on a per user basis. This being said, it is possible to assign multiple GPO’s to an OU but you will not be able to pick and choose which users belonging to that OU will recieve the policy. Depending on what your trying to accomplish through GP, you may be able to accomplish your goal through the use of IPSec policy. IPSec can be applied to user groups which gives you more granularity in how they are applied. Create user groups within the OU and create a seperate policy to control each group.

Outlook profiles can be configured to use your company’s Exchange server as the source of the profile. Configuring Outlook in Exchange Server mode leaves all of the users messages, folders etc. on the server making it available to a user from any computer on the network unlike profiles that download messages off of the server to the local computer. You can include Outlook as part of your roaming profile configuration.

There is just not enough space to walk you through set up of each of the above solutions, but if you do your homework you will find tons of great information on line to help you. One bit of advice, make sure you take some time and plan out exactly what you want to do and research the best way to get it done. You can get in over your head real fast if your not familiar with what your doing.

Good luck!