server 2003 / terminal services

[jkpchewy]

I have a 2003 server setup to be a terminal services server. The 2003 server is connected to a 2000 DC. I am trying to configure IE 6 options and would like them to be implemeted to all profiles that connect to the server 2003 machine. I know there are added features for this machine that the 2000 server cannot use in it's active directory. How can i setup what applications each user can and connot use and also, what webpages each profile can and cannot use? Any help would be greatly appreciated.

 

[pbxman]

We use a TS mandatory profile and apply that to all users who login via TS on certain servers. It's activated in the AD users & computers...pick a user and under the "Terminal Services Profile" TAB, we have C:\Documents and Settings\TSuser.MAN. Thats where you set their default TS profile in AD. The rest is done server side.
Im sure there are tons of documents out there on how to create mandatory terminal service profiles.



pbxman
Systems Administrator

Please let Tek-Tips members know their posts were helpful.

 

[SWarrior]

pbxman,

I am trying to implament this very thing with the Mandatory Roaming Profile, but when user tries to log in, it says that it can't because it can not find it. I Do have the profile on the Terminal Server. Is there a setting somewhere that I don't see that does this?

Thanks for your help!
-SWarrior

 

[jkpchewy]

Manditory profile sounds pretty cool. Can I make this profile include IE settings such as trusted sites both internet and intranet???? We also have an application that has not been signed by microsoft. Every time a person that remotes into the server tries to open it, it tells them it is not sigend and asks if the still want to open this. I can get this to shut off by turning off signature signing in IE properties but this does not cary over to all profiles. I was not sure if the options were the same for the 2000 DC and the 2003 terminal server.

 

[pbxman]

SWarrior - do you have the profile path set in the AD Users & Computers "Terminal Services Users Profile" Tab under the specific user's settings? Also, the profile shows as mandatory on the server right?


jkpchewy - you can do that. What you need to do is logon as a domain admin and configure IE & the account how you want it. Then you have to go into the servers user profiles, and "copy to" the default user profile. All TS users who logon will pull the same settings you configured in the profile when you built it. You dont need to make it mandatory to do that,either. If you want to switch everyone over to a set profile, delete all of the other profiles on the server, and start from scratch. When those users login again, they will pull the properties from the default user profile which you copy the settings to.

pbxman
Systems Administrator

Please let Tek-Tips members know their posts were helpful.

 

[jkpchewy]

When you say default user profile, you mean the all users???

 

[pbxman]

no - the default user profile. That is the profile that new logins build their profiles off of. The all users is just that - all users (including you and administrator). You dont want to mess with the all users if you dont have to. If youre doing mandatory profiles, you definitely dont want that to apply to you or another admin account.

pbxman
Systems Administrator

Please let Tek-Tips members know their posts were helpful.

 

[pbxman]

I should point out just in case - in order to "copy to" and see the default user profile, you have to show hidden files.

pbxman
Systems Administrator

Please let Tek-Tips members know their posts were helpful.

 

[jkpchewy]

OK thanks, i will give that a shot.

 

[Andreh]

rename the 'ntuser.dat' to 'ntuser.man' in the user's profile itself to make it a Manditory profile. Use GPO's to configure IE (and other) settings.

"Assumption is the mother of all f#%kups!