Hello,
I have a very strange thing happening relating to Group Policies and older NT profiles.
We are in the process of moving MF 1.8 (SP4) from Windows NT4 to Windows 2000. TS Profiles are set on one server outside the farm.
The news servers are tied down with a Group Policy applied to an OU for the Citrix servers.
All new users are OK, the desktop is tied down and they cannot access the M and N drives for example. However, some users are not having the restrictions applied.
I have created a test new user with a new profile and all is well, if I then change the path to point to a users profile who doesn't seem to be tied down then the test user also has access to the whole server. It looks like there is something in the original (NT 4) profile that is ignoring the Group Policy setting.
I can switch back the test user to use their profile and the restrictions once again apply, if I then go back to the trouble profile the restrictions don't apply. I have tested this with a few profiles and can reproduce it. I have also ensured that the test user has suitable rights to the 'other person's profile (i.e. the one that seems to negate the restrictions.
Is this possible and/or could anyone else through further light on the problem.
Many thanks.
I have a very strange thing happening relating to Group Policies and older NT profiles.
We are in the process of moving MF 1.8 (SP4) from Windows NT4 to Windows 2000. TS Profiles are set on one server outside the farm.
The news servers are tied down with a Group Policy applied to an OU for the Citrix servers.
All new users are OK, the desktop is tied down and they cannot access the M and N drives for example. However, some users are not having the restrictions applied.
I have created a test new user with a new profile and all is well, if I then change the path to point to a users profile who doesn't seem to be tied down then the test user also has access to the whole server. It looks like there is something in the original (NT 4) profile that is ignoring the Group Policy setting.
I can switch back the test user to use their profile and the restrictions once again apply, if I then go back to the trouble profile the restrictions don't apply. I have tested this with a few profiles and can reproduce it. I have also ensured that the test user has suitable rights to the 'other person's profile (i.e. the one that seems to negate the restrictions.
Is this possible and/or could anyone else through further light on the problem.
Many thanks.