Stop RDP collecting Icons on the desktop in the Terminal services profile folder, in the Terminal Services forum on BrianMadden.com

Hello, this is probably a silly question but i have googled this for 2 days and am now so confused I need to just ask..

We are running 10 W2k3 Citrix severs running single applications and desktops. We also use XP SP2/3 Desktops desktops on the domain.

PROBLEM:
Admins and some developers can RDP from Citrix and from their desktops to servers within our domain.
What we are finding is that when a user is RDP'd to a server, every Icon they create on a desktop(specific to that server) gets written back to their TS profiles folder when they log off.
The problem is that the icon/s appear on the next(different)server they log on to.
We do not wish to implement mandatory profiles.

Is there a way to stop Desktop icons being written back to the TS profile, or, is there a way to stop the RDP app using the TS profiles folder and just use the local profile on the server?

If I haven't covered something, I will add the info in another post.

Thanks for your help,

Ian

Maybe you could check out the following policy and apply it to the servers you manage via RDP:

Computer Config - Administrative Templates - System - User Profile
"Prevent User Profile changes from propegating to the server"

Or "Only allow local user profiles" as well...

Hey Mike,

Thanks very much for your reply!!!

I had just came back to let everybody know I had sorted my dilemma over lunch, when I saw your message... (who said 2 pints of beer at lunch isn't good for the brain)

I remembered a reference to "Only allow local user profiles" and tested it out this afternoon, it works a treat. I avoided "Prevent User Profile changes from propagating to the server" as you first recommended as I don't want the users TS profiles to interfere with their profiles on the servers.

So, after the affects of alcohol fully wear off (as I usually come to my senses and work out this is not best practice), I will commit a new GPO (Default Server Policy) to the Servers(OU) with "Only allow local user profiles" ENABLED and I will add "Only allow local user profiles" DISBLED in our Citrix Server Policy (linked to Citrix(OU) ) hopefully allowing roaming profiles on the Citrix server only.

Domain -> System(OU) -> Servers(OU) ----> OtherServers(OU)
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ..+-> Citrix(OU)

Can you see any problems with this?


Thanks again Mike,

Ian