Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

How do I apply the policy:

Computer Configuration/Administrative Templates/Windows Components/Terminal Services/Client Server data redirection/Do not allow client printer redirection only to a few users?

Do I have to create 2 OU's and 2 policies just for this? I see I can't create a group and apply the GPO to the group and add the users to that group.

How do I selectively apply a policy to only a few users without creating a whole new OU for them (and without changing each user's AD properties individually)?

Thanks in advance.

share|improve this question
up vote 2 down vote accepted

This is going to be problematic. The setting you're trying to configure is a computer setting and is applied to the computer and therefore will affect everyone logging on to that computer regardless of any security filtering that you do. There isn't a corresponding user configuration setting for this so you're going to have to set this on a user by user basis in ADUC. You can use a tool such as ADModify.NET to make the change in bulk and then selectively enable drive redirection for only those users which you choose to have redirected drives in their TS session.

share|improve this answer
+1 - Right on. This is a scenario when no helpful combination of loopback group policy processing, filtering by security group, or any other hackery is going to work. The poster is going to have to modify the setting on individual user accounts. – Evan Anderson Jun 12 '10 at 4:15

You can do this with Group Policy Security Filtering. It's basically the same as the per-group GPO you're imagining, only implimentation is a bit... unintuitive.

You may have some problems trying to do it on computer configuration elements though, rather than user elements. You may be able to find an equivalent setting in the user section of Group Policy editor.

share|improve this answer
-1 - That's not going to work for a computer setting being filtered by user. Even using loopback group policy processing won't do what the poster wants. – Evan Anderson Jun 12 '10 at 4:14

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.