Settings created in a GPO, including the IE settings, are automatically
applied to the user accounts (for User Configuration settings) or computer
accounts (for Computer Configuration settings) that are in the scope of the
GPO by the Group Policy processing. You don't have to do anything with the
files that comprise the GPO itself, that's all handled by the GPO
processing.
User Configuration settings are applied to user accounts when the logon. If
you link the GPO to the OU containing the user accounts you want these
settings applied to, they will be applied to the user account regardless of
which domain member computer they logon to.
If you want the User Configuration settings to ONLY apply when a user logs
on to a specific set of computers (e.g. Terminal Servers), link the GPO to
the OU containing the computer accounts for those computers. In the same
GPO or a different one (e.g. one that has other Computer Configuration
settings for the Terminal Servers) that is also linked to (or inherited by)
the OU set the following setting to Enabled:
Computer Configuration
Administrative Templates
System
Group Policy
User Group Policy loopback processing mode
I suggest using "Merge" mode in this case, but read the Explain text for
this setting to understand the implications of using Merge or Replace mode.
--
Bruce Sanderson MVP Printing
http://members.shaw.ca/bsanders
It is perfectly useless to know the right answer to the wrong question.
"Jeff" <Jeff@discussions.microsoft.com> wrote in message
news:AF1B19A9-8FE0-4337-9EC7-E952B3D42793@microsoft.com...
> Once it creates the INS and CAB files how do I autoapply that to all
> terminal
> user profiles?
>
> "Dragos CAMARA" wrote:
>
>> hi,
>> check on gpo user configuration\windows settings\internet explorer
>> maintenace\security\security zones and content ratings.
>> --
>> Dragos CAMARA
>> MCSA Windows 2003 server
>>
>>
>> "Jeff" wrote:
>>
>> > I want all my terminal servers to have a specific server added to their
>> > Local
>> > Policy zone in their internet options. Where do i do that at? I am
>> > hoping
>> > there is a flag inside the GPO for the terminal servers. Everytime I
>> > have a
>> > new user login their apps fail. After the user adds the server to the
>> > local
>> > intranet zone all works ok. i don't want to have to do this for 400+
>> > users
>> > if there is a way to do it in a policy.
>> >
>> > Thanks,