Restricting Terminal Servers sessions on some servers to some users

[Justyn]

Ok People,

Here is question on Terminal Services restrictions. There are two OU’s, one OU holds servers with Terminal Services enabled for a specific purpose, and the other OU holds accounts. They want to be able to restrict access to Terminal Services to some of the servers in the first OU to some of the accounts in the other OU.

The standard group policy says whether or not a user can use Terminal Services, but we need to restrict it to only certain servers for some of the users.

So the question is Restricting Terminal Servers sessions on some servers to some users, with an active directory group policy.

Thanks,
Justyn


Justyn Worrell
MCP, MCSE, MCT, CCA, CCEA, CCI
SCSA, CCSA, CCSE, CCNA, AANG-UP

Http://www.gtcsystems.com

 

[markdmac]

I don't think policy is necessarily your answer. Why not divide up your TS SUers into 2 groups. Restricted and non restriced? On each TS server add those specific groups to the list for "Allow Logon Via Terminal Services"

That should give you the restrictions you are looking for and you will only need to visit the servers once. Just maintain the groups after that.