Hello,

I am managing a domain with many servers two of which are terminal servers. Many users use remote desktop and connect to the terminal server. The terminal server has 2 accounting apps that users rely on to do their jobs. Unfortunately these accounting apps only run if users are local administrators. There is no way around that. As a consequence, I made the accounting group local administrators of 2 Terminal servers. To tighten security I created an OU "Terminal Servers" and moved both Terminal Servers to the OU. I then created a GPO and named it Loopback. I checked "Disable User Configuration Settings" and enabled "User Group Policy loopback processing mode". I set the Mode to "Replace" .
Then I created another GPO under the "Terminal Servers" OU and called it "Disable Internet Access". I then put a bogus proxy server under User Configuration-IEM-Connections/Proxy Settings.
I did a gpupdate /force on the PDC and on both Terminal Servers. I logged off and logged back on with a Test user account and the test user is able to go onto the internet from the terminal server.
I would like all internet access blocked from a Terminal Server for all users
I want all users to have access to the internet from their Desktops.
How do I accomplish this using a GPO?

Tacobell2000

First of all: I've yet to encounter an application which requires the users to be Administrators. Check here for a method to make them normal users again and only give them permissions on the registry keys and folders that they need:

My application runs fine for Administrators, but not for normal users

About your GPOs: have you disabled the Computer Configuration settings in your Internet GPO?

Run RSoP (Resultant Set of Policies to see which GPOs are applied to your testuser when loggin in to the TS.