Server 2003 Group Policy for Terminal Services Users Only

[mtech2008]

I would like to add restrictions using Group Policy - but only for users from the remote desktop group when they are connecting to the server.

I tried adding an Organizational Unit and adding restrictions to that after moving users into that OU - but that seems to effect their normal desktop logins and not the RDP logins.

Where did I go wrong?

Its a fairly basic setup without an OU's.

 

[mtech2008]

I want to add this - restrict users by name or group, without affecting the Administrator login for RDP.

 

[TheMisio]

mtech2008,

Add the Remote Desktop Users group to the GPO scope (remove authenticated users), go the delegation tab, click advanced, add administrators to the user list and choose Deny for Apply Group Policy. This will prevent this particular policy from applying to administrators.

Regards,

Michael