TS Restrictions not working - able to browse local drive

[vmotzney]

I have Terminal Services GP setup to restrict viewing or accessing local drives. Loopback w/replace is on, and restricitng office file/save as is also setup. issue is it does not work when saving in Word/Access/Excel/etc. The user is able to open the office 2007 file and save to anywhere on the local drive of the TS.

I have pasted the settings used in the GP below. I thought I have set all the setting according to what i have read, but not sure why it is not working. Any help is appreciated.

--------------------------------------
Computer Configuration (Enabled)
Policies
Administrative Templates
Policy definitions (ADMX files) retrieved from the central store.System/Group Policy

User Group Policy loopback processing mode
Enabled
Mode: Replace


User Configuration (Enabled)
Policies
Administrative Templates

Policy definitions (ADMX files) retrieved from the central store.

Control Panel

Prohibit access to the Control Panel
Enabled

Control Panel/Add or Remove Programs

Remove Add or Remove Programs
Enabled

Microsoft Office 2007 system/File Open/Save dialog box/Restricted Browsing

Activate Restricted Browsing
Enabled
Microsoft Office Access
Enabled
Microsoft Office Exce
l Enabled
Microsoft Office SharePoint Designer
Enabled
Microsoft Office InfoPath
Enabled
Microsoft Office OneNote
Enabled
Microsoft Office Interconnec
t Enabled
Microsoft Office Outlook
Enabled
Microsoft Office PowerPoint
Enabled
Microsoft Office Project
Enabled
Microsoft Office Publisher
Enabled
Microsoft Office Visio
Enabled
Microsoft Office Word
Enabled

Approve Locations
Enabled
List of Approved Locations:
c:\windows c:\windows

Enter the name of the Location as Value Name, and path as the Value. (That is the c:\windows used for testing)


Windows Components/Terminal Services/Terminal Server/Connections

Set rules for remote control of Terminal Services user sessions
Enabled
Options: Full Control without user's permission


Windows Components/Windows Explorer

Hide these specified drives in My Computer
Enabled
Pick one of the following combinations
Restrict all drives


Prevent access to drives from My Computer
Enabled
Pick one of the following combinations
Restrict all drives

[vmotzney]

Forgot to mention that this is a 2008 AD Domain and the TS Server is 2008 R2, but there is another one that is 2008.