Terminal server + DC

[LastWords]

I have a server which is acting as a terminal server and a domain controller. I realise this isn't best practice due to various security issues of having a dc available for remote access but this is what was requested, not recommended.

Nevertheless, I have a OU with a terminal services group policy, however I don't want to move the server outside the domain controller's OU. I have followed this article:

http://support.microsoft.com/default.aspx?scid=kb;EN-US;260370

What would be the best way of applying the group policy whilst leaving the dc in the dc ou?

Thanks

by Lastwords,

Maentwrog (n.Welsh): Celtic word for a computer spelling mistake.

 

[TechyMcSe2k]

Add the server account in the Scope tab/Security Filtering of the GPO using the GPMC. Then apply it to the DC OU. Make sure the security specifies only the computers or users you want it to apply to, so that all DC's do not apply this policy.