RE: [ActiveDir] GPO Screen Saver
Title: GPO Screen Saver Sure. Most TS' are configured to use loopback policy. This is per-computer policy you set in Admin. Templates that would apply to an OU containing TS servers. What setting a machine for loopback says is, "when a user logs into this TS, ignore their "normal" user policy settings and instead apply the user settings that are contained in the GPOs that apply to the computer (in this case, the TS servers)". Loopback comes with two modes. The first is replace, which is what I just described, where the user's policies are completely replaced. The second is "merge", which means, first run the user's normal user policies then run the computer's user policies. If the latter overwrites the former, then the computer policies "win". From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Christine AllenSent: Tuesday, June 06, 2006 8:30 AMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] GPO Screen Saver It is linked to the Domain and has been in place for about 2 years. I does filter down to our servers, which I liked. What's weird is this just started happening and I'm not sure what changed. Can you explain a bit more about "(unless you are using loopback in replace mode) unless it had a security filter preventing that" -Christine Christine N. Allen Systems Engineer BMC HealthNet Plan 2 Copley Place Boston, MA 02116 617-748-6034 617-293-4407 [EMAIL PROTECTED] From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darren Mar-EliaSent: Tuesday, June 06, 2006 11:09 AMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] GPO Screen Saver Hey Christine- You might want to check and see if something has changed on the filtering of that GPO. If its linked to the domain then I would guess it would be applying to all users in the domain, even if they are logged onto a TS (unless you are using loopback in replace mode) unless it had a security filter preventing that. Darren Darren Mar-Elia For comprehensive Windows Group Policy Information, check out www.gpoguy.com-- the best source for GPO tips, tools and whitepapers. Also check out the Windows Group Policy Guide, a soup-to-nuts resource for Group Policy information. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Christine AllenSent: Tuesday, June 06, 2006 7:45 AMTo: ActiveDir@mail.activedir.orgSubject: [ActiveDir] GPO Screen Saver We have a GPO to lock users desktops after 10 mins. However, now it seems to be locking their terminal server sessions. The GPO is at the domain level so our ts servers have the gpo applied to them as well. Could this gpo be locking their ts session as well? This gpo has been in place for a while and this just started happening. -Christine Christine N. Allen Systems Engineer BMC HealthNet Plan 2 Copley Place Boston, MA 02116 617-748-6034 617-293-4407 [EMAIL PROTECTED]
RE: [ActiveDir] GPO Screen Saver
Title: GPO Screen Saver It is linked to the Domain and has been in place for about 2 years. I does filter down to our servers, which I liked. What's weird is this just started happening and I'm not sure what changed. Can you explain a bit more about "(unless you are using loopback in replace mode) unless it had a security filter preventing that" -Christine Christine N. Allen Systems Engineer BMC HealthNet Plan 2 Copley Place Boston, MA 02116 617-748-6034 617-293-4407 [EMAIL PROTECTED] From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darren Mar-EliaSent: Tuesday, June 06, 2006 11:09 AMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] GPO Screen Saver Hey Christine- You might want to check and see if something has changed on the filtering of that GPO. If its linked to the domain then I would guess it would be applying to all users in the domain, even if they are logged onto a TS (unless you are using loopback in replace mode) unless it had a security filter preventing that. Darren Darren Mar-Elia For comprehensive Windows Group Policy Information, check out www.gpoguy.com-- the best source for GPO tips, tools and whitepapers. Also check out the Windows Group Policy Guide, a soup-to-nuts resource for Group Policy information. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Christine AllenSent: Tuesday, June 06, 2006 7:45 AMTo: ActiveDir@mail.activedir.orgSubject: [ActiveDir] GPO Screen Saver We have a GPO to lock users desktops after 10 mins. However, now it seems to be locking their terminal server sessions. The GPO is at the domain level so our ts servers have the gpo applied to them as well. Could this gpo be locking their ts session as well? This gpo has been in place for a while and this just started happening. -Christine Christine N. Allen Systems Engineer BMC HealthNet Plan 2 Copley Place Boston, MA 02116 617-748-6034 617-293-4407 [EMAIL PROTECTED]
RE: [ActiveDir] GPO Screen Saver
Title: GPO Screen Saver Hey Christine- You might want to check and see if something has changed on the filtering of that GPO. If its linked to the domain then I would guess it would be applying to all users in the domain, even if they are logged onto a TS (unless you are using loopback in replace mode) unless it had a security filter preventing that. Darren Darren Mar-Elia For comprehensive Windows Group Policy Information, check out www.gpoguy.com-- the best source for GPO tips, tools and whitepapers. Also check out the Windows Group Policy Guide, a soup-to-nuts resource for Group Policy information. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Christine AllenSent: Tuesday, June 06, 2006 7:45 AMTo: ActiveDir@mail.activedir.orgSubject: [ActiveDir] GPO Screen Saver We have a GPO to lock users desktops after 10 mins. However, now it seems to be locking their terminal server sessions. The GPO is at the domain level so our ts servers have the gpo applied to them as well. Could this gpo be locking their ts session as well? This gpo has been in place for a while and this just started happening. -Christine Christine N. Allen Systems Engineer BMC HealthNet Plan 2 Copley Place Boston, MA 02116 617-748-6034 617-293-4407 [EMAIL PROTECTED]
[ActiveDir] GPO Screen Saver
Title: GPO Screen Saver We have a GPO to lock users desktops after 10 mins. However, now it seems to be locking their terminal server sessions. The GPO is at the domain level so our ts servers have the gpo applied to them as well. Could this gpo be locking their ts session as well? This gpo has been in place for a while and this just started happening. -Christine Christine N. Allen Systems Engineer BMC HealthNet Plan 2 Copley Place Boston, MA 02116 617-748-6034 617-293-4407 [EMAIL PROTECTED]
