Terminal Server Lock Down GPO sort of works?

[roger85]

Hello everyone.

Need some help.

We have a little simple network, as follows:

2 x Windows 2003 Domain Controlers (1 is data adn the other is print)
1 x NEW Windows 2003 Member server (Terminal Server)

We have 30 Users in total.

AD

Very very simple, all defaults other than we have created a new OU called "Our Company" then within here More OU's for Users, Groups, To be Deleted.

I have created another OU with "Our Company" called Locked Down Termianl Srv, and moved our New Termianl Server from computers to here.

Then i created a new GPO call Locked GPO and enabled Loopback Processing.

Then i locked it down by restricking certain things like remove Run, Disable Control Panel etc.

The idea is to let around 10 users conect to the Termianl server remotely and use Simple Office Applications and not to be able to damage the server.

All works, users can log in etc, however certain things in the GPO do not work, for example the RUN command is still their, they can still access certian drives, etc etc etc.......

Can anyone tell me what i am doing wrong here ?

Thanks

 

[dberg35]

Try gpupdate /force, also make sure DNS is working correctly

 

[roger85]

Hi,

i've done this many times, DNS is fully working too.