I have a Windows 2000 Domain controller with Terminal Server installed on it. I understand that running TS on a DC is not recommended, but I have to use what I have available.
My question is how do I lockdown a user with a GPO when they log on remotely and not when they log in over the LAN.
I would like one GPO to be applied when the user logs in from the office and another when they log in from offsite.
Thanks for you help.