AppLocker on terminal servers in a domain?

Question

Windows

Hello. The domain has a few distant TS, not connected to any cluster, but stupidly working separately. There is a task: an extremely small group of users (well, of course, regardless of which terminal they work on) to cover up access to certain applications. I tried to do it through GPO, but it didn’t work out for me - the user can still run the application on the vehicle (Windows 2008, closed access along the way, wrote the path manually, because this software is naturally not on the CD, maybe this is the reason ?). Somehow I googled and did not really find anything about such a configuration

Answer 1

On terminal servers, group policy needs to be looped back (loopback processing) support.microsoft.com/kb/260370/ru