Group Policy problems

[zarkon4]

I have an OU layed out as follows

TSUsers
-Dashboards
--DashboardPolicy
-Bldg1
--Bldg1Policy
-Bldg2
--Bldg2Policy

Both Bldg1 and 2 policies are set up to disconnect TS sessions after 2 hours of inactivity, the Dashboard policy has those settings disabled.

Users under the Dashboards OU are being disconnected after 2 hours, I do not want this to happen. I have blocked inheritence on the policies.

I seem to be missing something and am not sure what it is.
Any assistance would be greatly appreciated.

 

[force5]

If bldg1 & 2 have exactly the same parameters for this policy, then you only need to create 1 policy for all 3 ou's: apply the policy for bldg1 & 2 and choose to decline the policy via delegation for dashboards ou.
Unless I am misunderstanding you, this is how I would do it.

Chad

Thanks,

Chad
Network Administrator

 

[acl03]

Where are your user accounts? Spread out through the 3 OUs?

You can use the Computer Configuration in the GPO to designate logoff times by server, instead of by user. This may work better for you if your user accounts are spread across multiple OUs.

See this from the "explain" text:

Also note that this setting appears in both Computer Configuration and User Configuration. If both settings are configured, the Computer Configuration setting overrides.

Thanks,
Andrew

Hard work often pays off over time, but procrastination pays off right now!

 

[zarkon4]

I made a typo error...I have 2 Policies, 1 is bldgpolicy and the other is dashboardpolicy.
Both of these have the computer-administrative terminal server session settings disabled. The user settings are configured for bldgpolicy and disabled for dashboardpolicy.
Somehow the users under dashboard policy are getting disconnected as if they were in the bldg ou and policy.

 

[acl03]

Do you have loopback processing turned on?

Thanks,
Andrew

Hard work often pays off over time, but procrastination pays off right now!

 

[zarkon4]

Not sure, where do I check for that...bear with me I am still a novice at this.

 

[acl03]

It would only be on if you turned it on...it's a common setting to lock down terminal servers.

Computer config/admin templates/system/group policy/user group policy loopback processing mode

Thanks,
Andrew

Hard work often pays off over time, but procrastination pays off right now!

 

[zarkon4]

It is not turned on...should it be on?

 

[acl03]

Well, turning it on won't help your problem, so I'd leave it off for now.

Can you give a more detailed description of your OU/GPO structure?



Thanks,
Andrew

Hard work often pays off over time, but procrastination pays off right now!

 

[zarkon4]

I have a default domain policy, under each ou i have policies setup similar to my original post

 

[acl03]

It would be easier if you itemized your entire setup again for me to help you...

All OU's, what policies/servers are in each, where the users are located, which users are logging into each server, etc.

Thanks,
Andrew

Hard work often pays off over time, but procrastination pays off right now!

 

[zarkon4]

Domain
-Default Domain Policy
-AccountingOU
--user1
--user2
--computer
--computer
--Accounting Policy
-SalesOU
--user3
--user4
--computer
--computer
--Sales Policy
-Domain ControllersOU
--PDC
--BDC
--DCPolicy
-ServersOU
--Server1
--Server2
--ServerPolicy
-Terminal ServerOU
--LPTerminalServer
--TSServerPolicy
--CellDashboardsOU
---CellUser1
---CellUser2
---CellUserPolicy
--Bldg1OU
---User
---User
---TSUserPolicy
--Bldg2OU
---User
---User
---TSUserPolicy

I have other depts as well, all set up like the above.

 

[acl03]

Which user logging into which server gives you the result you are trying to resolve?

Thanks,
Andrew

Hard work often pays off over time, but procrastination pays off right now!

 

[zarkon4]

--LPTerminalServer
--TSServerPolicy
--CellDashboardsOU
---CellUser1
---CellUser2
---CellUserPolicy
--Bldg1OU
---User
---User
---TSUserPolicy (Log users off after 2 hrs inactivity)
--Bldg2OU
---User
---User
---TSUserPolicy

In the above Celluser1 gets logged off as if they are in the Bldg1OU. That is the problem. everything else works as it should.

 

[acl03]

What server is cellUser1 logging into?

Thanks,
Andrew

Hard work often pays off over time, but procrastination pays off right now!

 

[zarkon4]

LPTerminalServer

 

[zarkon4]

Any ideas?

 

[acl03]

Sorry about not responding, I was on vacation for a while and lost this in my pile of emails.

Are you still having problems?

Thanks,
Andrew

Hard work often pays off over time, but procrastination pays off right now!

 

[zarkon4]

Yes, only now it's reversed, the celldashboard is working and the other ou's are not.

 

[acl03]

Has anything changed to prompt the reversal?

Thanks,
Andrew

Hard work often pays off over time, but procrastination pays off right now!