Windows 2000 Terminal Server HELP please....

  • EkilErif
  • Born
  • Born
  • EkilErif
  • Posts: 1
  • Loc: Richards Bay

Post 3+ Months Ago

Good Morning,

I am currently experiencing the following problem and am wondering if someone has #1 Experienced a similar problem, #2 Managed to solve a similar problem.

We currently have a Windows 2000 Advanced Server with Service Pack 3 running as a desktop replacement Server for our Production and Commercial users. Yesterday a user reported to me that when she clicks Start the button changes it's view to make it look as if it has been clicked and just hangs. She can continue to work normally in her session and is able to launch applications from her desktop and her Start button remains depressed. She is not able to log off her session, nor launch anything from her start menu.

My initial thoughts were that it were something to do with her profile. I asked her to save any current work and logged her session off using the Terminal Services Manager. I logged in as her via an RDP session and everything worked fine, Confirming her profile was fine.

This morning I have been informed that her and 3 other users have the same problem. We have restarted the Terminal Server in the interim due to a Network Error which occured.

Does anyone have any idea as to what else I can check. The users are connecting from Compaq T20 thin clients.

The Following GPO applies to this user as she is part of our TS Commercial Security Group.
TS Commercial
Data collected on: 12/10/2004 08:57:58 AM

General
Details
Domain mondikraft.co.za
Owner MONDIKRAFT\Domain Admins
Created 29/09/2003 12:44:30 PM
Modified 27/09/2004 11:51:46 AM
User Revisions 142 (AD), 142 (sysvol)
Computer Revisions 2 (AD), 2 (sysvol)
Unique ID {DC03398B-9644-4D96-ACEC-4214FE6B76A2}
GPO Status Enabled

Links
Location Enforced Link Status Path
Mondikraft TS Servers No Enabled mondikraft.co.za/rcb/Mondikraft TS Servers
Rcbkftts01 No Enabled mondikraft.co.za/rcb/Servers/Win2k Servers/Rcbkftts01
Terminal Services No Disabled mondikraft.co.za/rcb/Terminal Services

This list only includes links in the domain of the GPO.
Security Filtering
The settings in this GPO can only apply to the following groups, users, and computers:Name
MONDIKRAFT\RCBKFTTERM1$
MONDIKRAFT\RCBKFTTS01$
NEUSIEDLER\One-World Terminal Server Users
NEUSIEDLER\TS01users

WMI Filtering
WMI Filter Name None
Description Not applicable

Delegation
These groups and users have the specified permission for this GPOName Allowed Permissions Inherited
MONDIKRAFT\Domain Admins Edit settings, delete, modify security No
MONDIKRAFT\Enterprise Admins Edit settings, delete, modify security No
MONDIKRAFT\RCBKFTTERM1$ Read (from Security Filtering) No
MONDIKRAFT\RCBKFTTS01$ Read (from Security Filtering) No
NEUSIEDLER\One-World Terminal Server Users Read (from Security Filtering) No
NEUSIEDLER\TS01users Read (from Security Filtering) No
NT AUTHORITY\Authenticated Users Read No
NT AUTHORITY\SYSTEM Edit settings, delete, modify security No

Computer Configuration (Enabled)
Administrative Templates
System/Group Policy
Policy Setting
User Group Policy loopback processing mode Enabled
Mode: Replace


System/Logon
Policy Setting
Run these programs at user logon Enabled
Items to run at logon
c:\files\gpresult.exe >l:gpresult.txt



User Configuration (Enabled)
Windows Settings
Security Settings
Public Key Policies/Autoenrollment Settings
Policy Setting
Enroll certificates automatically Enabled
Renew expired certificates, update pending certificates, and remove revoked certificates Disabled
Update certificates that use certificate templates Disabled


Folder Redirection
My Documents
Setting: Basic (Redirect everyone's folder to the same location)
Path: \\rby1-fs01\Home\%USERNAME%\My Documents
Options
Grant user exclusive rights to My Documents Disabled
Move the contents of My Documents to the new location Enabled
Policy Removal Behavior Leave contents

Internet Explorer Maintenance
URLs/Important URLs
Name URL
Home page URL http://rcbg01nt/inotes.nsf
Search bar URL Not configured
Online support page URL Not configured


Security/Authenticode Settings
Trusted PublishersIssued To
None
Policy Setting
Trusted publisher lockdown Disabled

Administrative Templates
Control Panel
Policy Setting
Show only specified Control Panel applets Enabled
List of allowed Control Panel applets
main.cpl
Printers

To create a list of allowed Control Panel applets, click Show,
then Add, and enter the Control Panel file name (ends with .cpl)
or the name displayed under that item in the Control Panel.
(e.g., desk.cpl, powercfg.cpl, Printers)


Control Panel/Add or Remove Programs
Policy Setting
Remove Add or Remove Programs Enabled

Control Panel/Display
Policy Setting
Remove Display in Control Panel Enabled

Control Panel/Regional and Language Options
Policy Setting
Restrict selection of Windows menus and dialogs language Enabled
Restrict users to the following language: English


Desktop
Policy Setting
Hide My Network Places icon on desktop Enabled
Remove Properties from the My Computer context menu Enabled

Desktop/Active Desktop
Policy Setting
Disable Active Desktop Enabled
Disallows HTML and Jpg Wallpaper

Policy Setting
Prohibit changes Enabled

Network/Offline Files
Policy Setting
Prevent use of Offline Files folder Enabled
Prohibit user configuration of Offline Files Enabled
Prevents users from changing any cache configuration settings.

Policy Setting
Remove 'Make Available Offline' Enabled
Synchronize all offline files before logging off Enabled
Turn off reminder balloons Enabled

Start Menu and Taskbar
Policy Setting
Add Logoff to the Start Menu Enabled
Prevent changes to Taskbar and Start Menu Settings Enabled
Remove and prevent access to the Shut Down command Enabled
Remove links and access to Windows Update Enabled
Remove Network Connections from Start Menu Enabled
Turn off personalized menus Enabled

System
Policy Setting
Don't display the Getting Started welcome screen at logon Enabled
Prevent access to registry editing tools Enabled
Disable regedit from running silently? No

Policy Setting
Run only allowed Windows applications Enabled
List of allowed applications
*.bat
123w.exe
AcroRd32.exe
agentsvr.exe
calc.exe
cftmon.exe
cmd.exe
cwblmsrv.exe
defptr.exe
downtime.exe
EXCEL.EXE
explorer.exe
faxctrl.exe
fuw32.exe
gpresult.exe
iexplore.exe
keymail.dll
kix32.exe
kodakimg.exe
mdm.exe
mmc.exe
MSACCESS.EXE
mstsc.exe
net.exe
nhldaemn.exe
nlnotes.exe
nminder.exe
notepad.exe
notes.exe
nwtray.exe
pcscm.exe
pcsws.exe
photoed.exe
pm2.exe
POWERPNT.EXE
procbook.exe
proquota.exe
rdpclip.exe
rfclient.exe
saplgpad.exe
saplogon.exe
shstat.exe
updaterui.exe
WFaxVw32.exe
wfcrun32.exe
wfica32.exe
winlogon.exe
WINWORD.EXE
wordpro.exe



System/Ctrl+Alt+Del Options
Policy Setting
Remove Task Manager Enabled

System/User Profiles
Policy Setting
Limit profile size Enabled
Custom Message You have exceeded your profile storage space. Before you can log off, you need to move some items from your profile to network or local storage.
Max Profile size (KB) 10000
Include registry in file list Disabled
Notify user when profile storage space is exceeded. Enabled
Remind user every X minutes: 15


Windows Components/Internet Explorer
Policy Setting
Disable external branding of Internet Explorer Enabled

Windows Components/Windows Explorer
Policy Setting
Allow only per user or approved shell extensions Enabled
Hide these specified drives in My Computer Enabled
Pick one of the following combinations Restrict A, B, C and D drives only

Policy Setting
Hides the Manage item on the Windows Explorer context menu Enabled
No "Computers Near Me" in My Network Places Enabled
No "Entire Network" in My Network Places Enabled
Prevent access to drives from My Computer Enabled
Pick one of the following combinations Restrict A, B, C and D drives only

Policy Setting
Remove "Map Network Drive" and "Disconnect Network Drive" Enabled
Remove DFS tab Enabled
Remove Hardware tab Enabled
Remove UI to change keyboard navigation indicator setting Enabled
Remove UI to change menu animation setting Enabled
Removes the Folder Options menu item from the Tools menu Enabled
Turn on Classic Shell Enabled

Windows Components/Windows Update
Policy Setting
Remove access to use all Windows Update features Enabled

Extra Registry Settings
Display names for some settings cannot be found. You might be able to resolve this issue by updating the .ADM files used by Group Policy Management.

Setting State
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisableLocalMachineRunOnce 1

Thanks in advance
Richard

Post Information

  • Total Posts in this topic: 1 post
  • Users browsing this forum: No registered users and 24 guests
  • You cannot post new topics in this forum
  • You cannot reply to topics in this forum
  • You cannot edit your posts in this forum
  • You cannot delete your posts in this forum
  • You cannot post attachments in this forum
 
 

© 1998-2014. Ozzu® is a registered trademark of Unmelted, LLC.