Terminal group policy does not work

October 7, 2011 at 05:12:19
Specs: Windows 2003 R2 SP2
Hello everybody,
I set up an OU container group policy stating, besides other rules, that users in the OU cannot redirect their local drives over the RDP client.
GPO editor path is:
Computer configuration -> Administrative templates -> Windows components -> Termnal Services -> Client/server data redirection
policies are : Do not allow drive redirection - Enabled
Do not allow smartcard redirection - Enabled
The problem is that rules suppressing drive redirection does not work and local drives are always redirected and accessible.
The other rules works fine.

System is Win 2003 R2 SP2 server.
Thank you for any clue...


See More: Terminal group policy does not work

Report •

October 7, 2011 at 20:24:33
Can you just use RSOP ( Resultant Set of Policies) option to creat a scenario like that . If should show you the exact cause of problem.


Report •

October 12, 2011 at 09:40:39
Hello Vishal.
I have spent quite a time on it recently and I didnt find anything what could be a problem. Findings are:

GPRESULTS in group policy mgmt console reports correct winning GPO including settings.
Contrary to statement above is that GPRESULTS also doesnt report settings which were set up in Computer Sttings -> Administrative templates

I have made some tests playing around with GPOs...
Conclusion is that obviously settings in customized GPO in Computer configuration --> Administrative Templates section are not applied when the GPO is in OU.
Computer configuration --> Administrative Templates section works fine only when GPO object is placed directly in the domain OU , I mean underneath of Default domain policy with following link order of course.
Thats my finding and it seems to me as a bug unless someone gives better explanation because as far as I know and read so far, I didnt find any exception to processing GPOs in customized OUs.

Any idea ?


Report •
Related Solutions

Ask Question