Server Configuration with Global Policies (GPO’s)

Posted on Updated on

When configuring a Citrix/Terminal Server, Group Policies should be your first choice (I always use GPO’s for all customers), rather than using the Terminal Services Configuration tool. The main advantage is that the settings will be applied to all servers in your farm/forest. 

How to use GPO to configure a Terminal Server/Citrix:

  1. Create the Terminal Server in a separate OU (Machine Account not a users)
  2. Create a TS-specific GPO
  3. Configure the GPO to use “loopback processing” with the “Replace” option (see KB231287)
  4. Apply GPO to the OU which contains the Terminal Server machine account
  5. Add the Terminal Server machine account to the security list of the GPO
  6. Add a User group to the security list of the GPO (or keep the default entry for “Authenticated Users” if you want the settings in the GPO to apply to all users)
  7. Modify the rights for Administrators on the GPO: select “Deny” for the right to “Apply this policy” (see KB816100)

White papers: For Windows Server 2008 / Vista

  1. Download the Managing Group Policy ADMX Files Step-by-Step Guide
  2. 929841 – How to create a Central Store for Group Policy Administrative Templates in Window Vista
  3. Download the ADMX Migrator – utility to convert your existing Group Policy ADM Templates to the new ADMX format
  4. Download the Group Policy Settings Reference for Windows Server 2008 Beta 3

Windows Server 2003 / 2000 / XP

  1. Step-by-Step Guide for Configuring Group Policy for Terminal Services
  2. Download the Windows Server 2003 Group Policy Infrastructure White Paper
  3. Download the Group Policy Management Console – 2003
  4. Download the Group Policy ADM Files for each OS / SP combination of W2K, XP and 2003
  5. 260370 – How to Apply Group Policy Objects to Terminal Services Servers
  6. 231287 – Loopback Processing of Group Policy
  7. 816100 – How To Prevent Domain Group Policies from Applying to Administrator Accounts and Selected Users in Windows Server 2003
  8. 250842 – Troubleshooting Group Policy Application Problems
  9. 940122 – How to use the Microsoft Group Policy Diagnostic Best Practice Analyzer (GPDBPA) tool to collect and to analyze data

2 thoughts on “Server Configuration with Global Policies (GPO’s)

    name said:
    September 1, 2008 at 4:27 am

    Hello!,

      iswarade responded:
      January 2, 2009 at 1:05 am

      Hello juga.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s