Group Policies - GPOs
When configuring a Remote Desktop Services environment, Group Policies should be your first choice, rather than using the Terminal Services
Configuration tool. The main advantage is that the settings will be applied to all servers in your farm, ensuring
identical settings on all servers.
A crucial option in any TS-related GPO is loopback processing. This setting allows you to define a set of
user settings, which will only be applied to users when they log on to the Terminal Server, without affecting
them when they log on to their workstation.
|
How-To's, White papers
Windows Server 2008 / Vista
Windows Server 2008 introduces Group Policy Preferences, in addition to Group Policy settings.
Confused? Read all about it here:
Windows Server 2008 R2 / Windows 7
Citrix XenApp 6 for Windows Server 2008 R2
Windows Server 2003
Known problems and troubleshooting tools
- 250842 - Troubleshooting Group Policy Application Problems
- Download Group Policy Log View - a utility you use to export Group Policy event data from the system and operational log into a text, HTML, or XML file
- 940122 - How to use the Microsoft Group Policy Diagnostic Best Practice Analyzer (GPDBPA) tool to collect and to analyze data
- Troubleshooting Group Policy Using Event Logs
- 910206 - How to troubleshoot Group Policy object processing failures that occur across multiple forests
Windows 2008 / Vista specific
- 2672601 - Terminal Services service crashes when Group Policy settings are refreshed in Windows Server 2008
- 2384558 - Inheritance of ownership in Group Policy Management Console does not work as expected
- 950876 - Group Policy settings are not applied on member computers that are running Windows Server 2008 or Windows Vista SP1 when certain SMB signing policies are enabled
- 953768 - A Windows Vista-based or Windows Server 2008-based computer needs at least the Read permission for Group Policy Objects in Active Directory Domain Services if the computer is configured for loopback processing
- 949528 - On a computer that is running Windows Vista or Windows Server 2008, a mandatory user profile is not deleted when the "Delete cached copies of roaming profiles" Group Policy setting is enabled
- 957802 - The "Slow network connection time-out for user profiles" Group Policy setting does not work for a Windows Vista Service Pack 1-based or a Windows Server 2008-based client computer
- 977755 - Error message when a Group Policy client-side extension cannot log RSOP Data:"0x80041002"
Windows 2003 / XP specific
- 887303 - Applying Group Policy causes Userenv errors and events to occur on your computers that are running Windows Server 2003, Windows XP, or Windows 2000
- 971243 - Gpresult.exe terminates unexpectedly displaying security options when using the "/v" flag on Windows Sever 2003 x64
- 932460 - Error message when a domain administrator or a local administrator uses the GPResult.exe tool or runs an RSoP query in Windows Server 2003: “Access denied”
- 896669 - When use the Group Policy Object Editor on a computer that is running Windows Server 2003 or Windows XP to change GPOs on a remote domain controller, the changes do not take affect for a long time
- 951059 - On a Windows Server 2003-based computer, registry-based policy settings are unexpectedly removed after a user logs on to the computer
- 555218 - Some Group Policy areas are missing from the Group Policy Editor unregistered MMC snapin dll's
- 950085 - The Group Policy Object Editor MMC snap-in displays a Group Policy setting as "Not configured" in Windows Server 2003 when the value of the setting is longer than 1,024 characters
- 977629 - Terminal Services Group Policies may not take effect in Windows Server 2003 after a terminal server restart replaces KB 970870
RDS related GPO issues
Folder Redirection
- 274443 - How to dynamically create security-enhanced redirected folders by using folder redirection in Windows 2000 and in Windows Server 2003
- 888203 - How to stop Folder Redirection in Windows Server 2003 and in Windows 2000 Server
- 938380 - After you apply a GPO to redirect a folder to a network share on Windows XP-based or on Windows Server 2003-based client computers, the redirected folder is empty
- 949143 - Windows Vista-specific folder redirection policies are removed from a GPO when you connect to an AGPM server component that is installed on a Windows Server 2003-based member server
- 978098 - Errors when you have a large "Folder Redirection" policy settings file in Windows Vista, in Windows 7, in Windows Server 2008, or in Windows Server 2008 R2
- CTX124389 - How to Configure Client to Server Content Redirection with Folder Redirection
Misc. policy settings
- 231289 - Using Group Policy Objects to hide specified drives
- 818465 - HOW TO: Use Group Policy to Permit Users to Redirect and Play Audio in a Remote Desktop Session to Terminal Services in Windows Server 2003
- 324807 - How To Use Group Policy to Configure Automatic Logon in Windows Server 2003 Terminal Services
- 890864 - Some idle session Group Policy settings do not work if you try to use them on a Microsoft Windows XP Professional-based computer that is in a domain environment
- 839918 - Hotfix that lets you control whether a user can save a password for Remote Desktop Connection sessions to a terminal server in Windows XP or in Windows 2000
|
