group policy not sticking in terminal services 2000

[homer15]

hey everyone,

i have a windows 2000 terminal server setup and i'm trying to basically lock it down for remote users, but the policy doesn't seem to be sticking.
from the domain controller, i made a new organizational unit just for the term server and moved the server into that unit. i set up a group policy and it should be affecting basically one group of users. i've locked down my computer, control panel, etc, but when the users login they still have access to everything. any ideas why the policy isn't sticking? i really don't know what information to provide besides that, so if i left something out just ask. thanks a lot.

[Great_One]

If group policy inheritance is not blocked, then domain policy could be overwriting the ou policy for that computer. I always set group policies based on users or groups.
Instead of putting the computer in the ou, put the user group and/or the users in the ou. If you just put the group in the ou, make sure it contains the correct users. your policies should apply ok. you may still have to block policy inheritance on that ou to prevent other policies from overriding your settings.

[homer15]

dang, that sucks. it'll only work if both the group and the users are in the ou. i know it's not a major deal, but now the ad is all untidy. haha. thanks for the help.

[homer15]

wait, that's not going to work. it'll lockout the user from their machine as well. can anyone think of a way to lockdown just the server with group policy?