2000 Group Policy Help
Anyone up for some Group Policy?
We're running a Windows 2000 Active Directory environment. I've got two terminal servers seperated into their own OU with a policy explicitly on them to lock them down. (removing shutdown, restricting access to explorer, restricting access to admin tools, etc. ) When certain users log onto the terminal server, it appears that these policies are taking over their local desktops also (thus removing the shutdown command from their start menu). I've been banging my head against this one for weeks. I believe if I remove the "user group policy loopback processing mode" from Computer Configuration->Administrative Templates->System->Group Policy, it will fix the problem, but then the other policies listed above are not applied (I took the policy off for one hour yesterday for testing and I had a user shut down the server )
I've also changed the loopback policy to the setting of "merged" thinking that this way the local computer policy (Terminal Server) would not overwrite it. Nothing seems to work. I need to keep the policy in tact on the server and allow the users to reboot their PCs at night. Any suggestions?
p.s. Don't say switch to Linux, that is not an option.
