Need help in setting up Group Policy for same user in local system and Terminal server

Hi All,
Currently our remote users are using our network using VPN client over internet.
They are generally at their home computer and doing VPN as they have to work only in one RDP server for application.
We actually have a OU created for these RDP users and assign then some strict policy like they can not use any other .exe,they can not user any explorer ,they can not even use windows explorer when they are on RDP they just use one exe of their application.
Now what my management want is they want their home computers in Domain and want them to login via their same credentials they are using for RDP but they don't want them to restrict in their home computers with any strict policy.
Now my confusion is how can I configure different policies for same users or same OU.
Can any one guide me please...

you can achieve this fairly easily with group policy.
create an OU and put your remote desktop servers in that OU.
configure both user and computer policies in a group policy and link it to that ou.
you need to enable loopback mode - you may want it in merge or replace depending on your other policies you have. Probably replace though I would guess. this is set in the computer configuration > admin templates > system / group policy section.
now remove the policy you have currently setup for your users on the users OU containing the rdp users. If you want you can move these users back to your main users OU.
when your users login to the RDP server the settings in the user section of the GPO linked to the RDP Servers OU will apply.
when the user logs in to their own computer the policies from the user OU and computer OU will apply - but not the more restrictive RDP OU.
hope that makes sense.
Regards,
Denis Cooper
MCITP EA - MCT
Help keep the forums tidy, if this has helped please mark it as an answer
My Blog
LinkedIn:

Similar Messages

I need help with setting up time machine for backup

I would like help with setting up time machine for backup.

You will need an external hard drive (formatted for a Mac).
Then you plug it in and go to system preferences>time machine and select the external HD and turn it on.
The backups are automatic.
Barry

How to apply Software Restriction policy for specific user in local group policy object ?

I am working on implementing user based software restriction policy programmatically for local group policy object.
If i create a policy through Domain Controller,i do have option for software restriction policy in user configuration but in local group policy editor i don't have option for that.
When i look for the changes made by policy applied from Domain Controller in registry, they modifies registry values for specific users on path HKEY_USERS\(SID of User)\Softwares\Policies\Microsoft\Windows\Safer\Codeidentifiers
They also have registry.pol stored in SYSvol folder in Domain Controller. When i make the same changes in registry to block any other application, application is getting blocked.
I achieved what i wanted but is it right to modify registry values ?
PS:- I am using Igrouppolicyobject API

I achieved what I wanted but is it right to modify registry values ?
You also can modify a registry programmatically based policy. Check this:
http://blogs.msdn.com/b/dsadsi/archive/2009/07/23/working-with-group-policy-objects-programmatically-simple-c-example-illustrating-how-to-modify-a-registry-based-policy.aspx
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

How can I set OIM password policy for OID Users.

Hi,
For me the target resourec is OID. When I create users in OIM, they get provisioned to OID. Their password also gets stored in OID.
Now, I have a password policy in OIM. In that policy, the password exipration day is set to 28 days. After 28 days, the user's password will expire in OIM. Is there any way that password will also expire in OID too, so that user will not be able to login in OID?
Thanks in advance.

You need to do the following.
1. Find the attribute in OID that determines the disable date.
2. Add a field to your provisioning process definition form.
3. Using a pre-populate adapter, use an input of your oim user account expiration date, and convert that to the format OID uses.
4. Update your lookup for provisioning attributes to include this new field to map the field name to the OID attribute.
5. Create an "Updated" task for this field so that when it gets changed, the new value is pushed to OID.
6. Create a user form trigger value for the field that maps to the oim user account expiration field. For this trigger, add a task to your oid provisioning process that does the same tasks as your pre-populate adapter to determine the new date value and pass it to the field on the process form.
Now when the OIM expiration date changes, this value will be passed to OID, and also when the account is first created.
Does this work for you?
-Kevin

Need help in adding a disclaimer page for guest users

We are trying to add a disclaimer page for public users to accept and continue for our public WLAN. Need to know how to add this page, and if there is a character liimit?

Go to Security -> Web Auth -> Web Login Page
Don't forget to enable Web Auth:
WLAN -> Guest LAN -> Security -> Layer 3 -> Web Policy
Is this what you are looking for?

How can I set default toolbar layout for all users in my system?

Hi everybody! I am running a local ubuntu server at my office. I can set some defaults preferences (about:config) for all new users in the system by defining those prefs in the /etc/firefox/syspref.js.
Now, I want to define default toolbar layout in a similar way (maybe not needed but fun), to copy the toolbar layout for my user. Is there a general way to do that?
thank you in advance!

You can try to create a default template folder (defaults/profile) in the Firefox and place the file(s) in that folder for newly created profile.
The only way to customize an existing profile is to copy files directly to it.

Need help on setting up the strucute for a SideScrolling game

I am using the tile approach and put the objects in a 2D array. For objects that move and interact with the chracters beyond just being there I have a list. The first group of Objects are called bricks and the second is World Objects. Bricks' locations are confined to the grid, but worldObjects' locations aren't. In the levelcreator I''ve made for the game you can select a brick and place it down and select a worldObject and place it down on the grid. I was wondering how I should make it so worldObject's aren't confined to the grid in the levelcreator. I've also made it so the levlecreator is zoomed out more than in the game. The grid consists of 75x75 tiles in the game and 50x50 tiles in the levelcreator. To switch from the levelcreator to the game I simply multiply by 1.5. Any suggestions. Or should I make it so All objects lie on the grid? Thanks. Any questions just post them here

make the world objects totally independent of the grid while the bricks be dependent on it. have the world objects in a list with their positions stored in the object itself. When your doing, say, collision checking with bricks, just take their positions and see if the cell it occupies has a brick in it.
personally i won't use a 2d array for a side scrolling game, the level tends to be rather large and a giant 2d array wastes annoying amounts of memory.

Need help with setting the entry point for application

Hi there,
I am kinda new to creating JAR files for application. I checked out the tutorials for creating the jar files, and I understood most of the concepts. There is one part in the tutorial which I still don't understand
it says:
We want to execute the main method in the class MyClass in the package MyPackage when we run the JAR file.
We first create a text file named Manifest.txt with the following contents:
Main-Class: MyPackage.MyClass
I am not exactly sure what the package is. Is it the name of the jar file, which I wish to create? Your detailed explanation would certainly be helpful. Thank you in advance.
Regards,
Young

Hi there,
I am kinda new to creating JAR files for
for application. I checked out the tutorials for
creating the jar files, and I understood most of the
concepts. There is one part in the tutorial which I
still don't understand
it says:
We want to execute the main method in the class
s MyClass in the package MyPackage when we run the
JAR file.
We first create a text file named Manifest.txt with
the following contents:
Main-Class: MyPackage.MyClass
I am not exactly sure what the package is. Is it
it the name of the jar file, which I wish to create?
Your detailed explanation would certainly be helpful.
Thank you in advance.
Regards,
YoungIts just the package name in your code hierarchy.
http://jarticles.com/package/package_eng.html

Group Policy for Windows Ten

http://community.spiceworks.com/topic/1104098-windows-10-gpos

Does anyone know if you need to have Server 2012 domain controller in order to setup group policy for windows ten? Currently we are running Server 2008 R2 but I am starting to get devices with windows ten that I will need to control from group policy.
@CreativeTechie
This topic first appeared in the Spiceworks Community

Need help w/ setting up ports to run a server for America's Army

Need help w/ setting up ports to run a server for America's Army. I read wat u need to change the ports but i dont understand wat to put. here is wat the site says
Q: How do I run my own server?
A: Quick and dirty server info:
1. Edit RunServer.bat to change the map.
2. Run RunServer.bat
Or:
server.exe LAN MAPNAME.aao (Host a LAN game)
server.exe global MAPNAME.aao (Host a Public game)
Also: When you create a server setup and want to allow other users to join your server, you need make sure the following ports are open for outgoing and incoming traffic in your firewall: 1716 (UDP), 1717 (UDP), 20025-20045 (TCP), and 20047 (TCP). Failure to open these ports will prevent the server from accepting connections from other players or prevent other players from being able to see your server online.
There are several settings that also need to be defined in your server configuration INI file (in the Windows version, these files are located in “My Documents\America’s Army Server Settings\{settings file name}.ini”).
[Engine.GameEngine]
ServerActors=Andromeda.AndromedaMBS
[Andromeda.Andromeda]
GameServerIp=
Make sure that you set the actual IP address of the America’s Army Server under GameServerIp= (for example, “GameServerIp=000.000.000.000”). The supplied address must be your actual internet IP address, if this is left blank or you supply the IP address for your internal network (such as 192.168.0.x), your server will not be able to accept connections from the internet.
If your server.ini file contains the setting shown below, please change the QueryPort setting to 20025. This setting can also be removed, as the default setting is port 20025.
[Andromeda.AndromedaMBS]
QueryPort=20025
Punkbuster user fix correction.
If [Engine.GameEngine] block has been changed to read as below:
[Engine.GameEngine]
ServerActors=IPDrv.AndromedaMBS
Please add the following block to your INI file:
[IpDrv.AndromedaMBS]
QueryPort=20025
(Last Updated: 2006-04-20)

Your images are not stored in the catalog. They are stored in folders on your computer. If you imported images that were already on your computer using the "Add" Option they are still in that same folder. If you imported images from your camera then they are in the folders that you specified when you imported. The catalog points to those images wherever they are located, and records all of the adjustments that you make to the image. When you send an image to Photoshop for further editing and save that image in Photoshop, it is normally saved back in the same folder as the original image.
Images are not "saved" in Lightroom. The basic default workflow in Lightroom is to store all of the adjustments in the catalog, leaving the original image completely unmodified. The catalog becomes the central controlling mechanism. It is a database that contains pointers to where the images are located and a record of all adjustments made to those images using Lightroom. Properly managed, you only have those original master files and secondary files for the ones that you have sent to Photoshop for further adjustment. When you want to provide a copy for someone else, you use the export dialogue for that purpose. I often export JPEG images to share with others or to post on the web. After I have usedthe JPEG for its intended purpose I delete it.

Default HTML editor set through group policy

OK, this should be an easy one. I know where I can find the setting to change the default HTML editor though group policy for IE10. Do I need to have Microsoft Office installed on the server if I want to set it as Word? The only option
I have right now is Notepad and Office is not installed on the server that I created GPOs. Thank you!

Hi Erin,
>> Do I need to have Microsoft Office installed on the server if I want to set it as Word?
Based on my knowledge, we need to install Office on the server to do this. Besides, when we use Group Policy Preferences, please pay attention to F5-F8 function keys.
Regarding this point, the following article can be referred to for more information.
Enable and Disable Settings in a Preference Item
https://technet.microsoft.com/en-us/library/cc754299.aspx
In addition, if we don't want to install Office on the server, we can try to configure the setting on a Windows 8/8.1 with both RSAT and Word installed or a member server 2012/R2 with GPMC and Word installed.
Best regards,
Frank Shen
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

How to change regional setting in group policy?

Hi guys,
I have some problem with updating regional setting via group policy.
On the windows server 2008 r2.
User Configuration\Preferences\Control Panel Settings\Regional option.
On the Regional option, I clicked add and i set the short date formal dd-MMM-yy. But after clicking apply and ok again if i right click the same regional setting , the short date used to change to M/d/yyyy again to the default.
Therefore please anyone who has the solution for this issue , please help me..

Hi,
>>But after clicking apply and ok again if i right click the same regional setting , the short date used to change to M/d/yyyy again to the default.
What's the color of the underline of the setting? If it's Red, to enable the setting configured, you need to press F6 to make the underline turn
Green.
Regarding this point, the following article can be referred to for more information.
Enable and Disable Settings in a Preference Item
http://technet.microsoft.com/en-us/library/cc754299.aspx
Best regards,
Frank Shen
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

How to set up Group Policy without any server installed

How to set up Group Policy on Win8 without any server installed?
I have set up 50 users on LAN and want to push softwares via one common point. From google I found to deploy Software using Group Policy. But then Group Policy occurs in Servers and I don't have any server set up.

Hello,
a Domain requires at least one Windows server OS machine which has Active Directory installed.
As previous already mentioned from SenneVL this also requires that computers are added to the domain and that you create user accounts in Active Directory users and computers which stores the account information in the Active directory database.
In your case with single computers each machine has its own database(SAM) which stores passwords etc. this is different in a domain.
Each computer has a local policy which will be overwritten from centrally managed policies from the domain.
"The common point would be my PC (Admin PC) ."
This machine can not be used for your needs with software installation for 50 computers.
"How To Use the Group Policy Editor to Manage Local Computer Policy."
This is about the local machine and you cannot manage them for other computers from your Admin PC.
"DOMAIN part: By default Microsoft takes everyone on Workgroup. Is that not a default DOMAIN? or should I make one lets say "ABC" on every PC ?"
NO, this is NOT a domain.
http://windows.microsoft.com/en-us/windows7/what-is-the-difference-between-a-domain-a-workgroup-and-a-homegroup
Best regards
Meinolf Weber
MVP, MCP, MCTS
Microsoft MVP - Directory Services
My Blog: http://blogs.msmvps.com/MWeber
Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.
Twitter:

Need help activating Adobe Acrobat XI PRO FOR WINDOWS?

need help activating Adobe Acrobat XI PRO FOR WINDOWS?

Hi jurleana15722686,
Are you working with a subscription version or perpetual (where you bought the software outright)? Are you running into a particular problem or receiving an error message when you try to activate?
For starters, please check out this document: https://helpx.adobe.com/x-productkb/policy-pricing/activation-deactivation-products.html.
If you're still having trouble, please let us know what the exact issue is, including any error messages that you're receiving. It would also be helpful to know what version of Windows you're using.
Best,
Sara
[disucssion moved to Downloading, Installing, Setting Up forum]

How do I set the delivery policy for a queue in iMQ 2.0?

The list on page 67 of the 2.0 administration guide appears to be
incomplete. Specifically, I'm interested in knowing how to set
the default delivery policy for a Queue through the jmqobjmgr command.
I need the valid attribute name to pass in to jmqobjmgr.

The "queueDeliveryPolicy" is an attribute of a queue
created in the broker - not in the administered object
destination so that is why you are not seeing that
attribute on the list on page 67.
By default, the broker by will use the "single" queue delivery
policy unless you choose to change the values of the property
"jmq.queue.defaultdeliveryPolicy" to SINGLE, ROUND-ROBIN, or
FAILOVER. If you would like to do this, see the Chapter 4
in the admin guide on "Starting and Configuring the Broker".
It may be easier to set the delivery policy for just one queue.
To do this, you can use the following command:
jmqcmd create dst -n myQueue -t q -o "queueDeliveryPolicy=f"
where valid values to queueDeliveryPolicy is f, s, r.
You can do a 'jmqcmd -H' to get more info on queue attributes or
see Chapter 6 in the admin guide on "Creating and Destroying Destinations".

Need help in setting up Group Policy for same user in local system and Terminal server

Similar Messages

Maybe you are looking for