TS Profile

[Robert]

In my environment we use roaming profiles and everything
works great. I am in the process of deploying Term Srvcs
and I would like for all TS clients to use the same
mandatory, unchangable profile. How can I do this
without changing the users existing roaming profiles?
Thanks.

 

[Vera Noest [MVP]]

In the user account settings, there are different enties for the
users "normal" profile and their Terminal Services profile.
Define a mandatory TS profile for all of your users.

 

[Robert]

When I say mandatory, I would like to remove the start
menu and only include 2 program icons on the desktop. I
would like to configure this setup so that only Domain
Admins could make changes to the profile. I am familiar
with the process of configuring this type of setup by
using a GPO for a "normal" network user, but not for a
terminal user.

All of the terminal users will also be accessing the
network from a standard desktop while in the office.
What I am trying to do is setup a remote access
environment for some users, but I want them to be very
limited to what they have access to when using Term Svcs
and not be able to make any changes to the desktop
settings that they see. Thanks.

 

[Vera Noest [MVP]]

OK, I understand. What you are looking for is a special TS GPO,
which applies to the clients only when they connect to the TS, but
which don't affect their normal logon to their workstation.
In this GPO, you can define a custom redirected start menu, custom
desktop, etc.
This is achieved by using "loopback processing" of the GPO. Check
for details here:

278295 - How to Lock Down a Windows 2000 Terminal Services Session
http://support.microsoft.com/?kbid=278295

260370 - How to Apply Group Policy Objects to Terminal Services
Servers
http://support.microsoft.com/?kbid=260370

231287 - Loopback Processing of Group Policy
http://support.microsoft.com/?kbid=231287