Question : W2K3 Terminal Services Group Policy

I want to restrict TS users when they log in from home whilst giving them full access to their PC in the office.

I only have one 2003 Server in the office, the users can get in fine but any GP changes I make affect their office PC too.  Have tried looking at the Loopback feature but can't get it to work!

The only programs I want them to have access to are Word, Excel, Powerpoint, Access, Outlook and they are only to see the P: Public and U: Users folders.

Any help would be greatly appriciated - they want to run with it asap but I want to lock down first (I already have the MS White paper on what to lock down).

Thanks...

Answer : W2K3 Terminal Services Group Policy

I don't think there's need for a rebuilt.
Just to check the loopback policy, take a test workstation (W2k or XP), and go through the steps described above: put it into its own OU, make sure no other GPOs apply to it, implement the loopback GPO for the OU, implement the user settings GPO for the OU, and check if the loopback settings work as they should (if you logon with an account that's not under the test OU, the user policy settings from the test OU should apply anyway).
The loopback policy is available on W2k or XP machines available as well, so this should work for testing.
Once you've got this running, it's time to check what's different with your TS.
The loopback policy might look a bit confusing at first, but it's not really that difficult.