AD Windows 2000 and 2003 1

[MasterPhil]

I am in the process of setting up a TS 2003 server but many of the notes on Microsofts site talk about Group Policy options that do not exist on my 2 W2K AD Domain Controllers.

Do I need to make the TS server a domain controller to expand the AD to include the new W2K3 options?

 

[tfg13]

Nope. Remember, the users will be logging into the TS as if they were there. The only thing I would do is look over my domain security policy, make sure that there isn't anything conflicting if you set something up in local (Group Policy is applied Local, Domain, Site and then OU with OU the last policy applied), and if there is, do a loopback on the TS, and set up a local policy for the machine with the settings you want.

 

[MasterPhil]

Ahhh, ok, thanks.

 

[MasterPhil]

Oh if only life was so simple.......

I have been ferreting around inside AD and the TS machines local policy settings and unless I am blind (always possible), there are a number of options that I will need control over but which do not exist. Namely options to prevent access to the command prompt and other stuff which are supposed to be in User Configuration\Admin Templates\System or Control Panel\****.

They are supposed to be in AD but are not and are definitely not in the Local Policy settings for the server unless there is an mmc snap-in I can't find.

HELP?

Phil

 

[tfg13]

Are you trying to disable the Start->Run functionality? If so, the setting you are looking for should be:

User Config->Administrative Templates->Start Menu and Taskbar and on the right side, it should be "Remove Run menu from Start Menu", as well some of the other settings you can mess with.

 

[MasterPhil]

Thanks for trying to help tfg13 but my problem is that whilst those options exist within AD, there is no such option within the TS machines local policy. As I only want to lock down the options on the TS box and not all user profiles I appear to be stuck.

Help?!?

Phil

 

[tfg13]

You are typing gpedit.msc from the run command at the Terminal Server, correct? This will get you the local policy, and they should be there.

 

[tfg13]

This excel document should help you out:

http://www.microsoft.com/downloads/...familyid=7821C32F-DA15-438D-8E48-45915CD2BC14

 

[MasterPhil]

Ahhhhhhh, all is becoming clear. Thanks tfg.