I am testing Terminal server HOST (RDS 2012).
Particularly, LOCKDOWN settings for Remote Users.
Found nice article with the list of settings to apply and clear description.
So first thing: Loopback is enabled. Then configured the stuff like no access to CP, hide C: drive and etc…
GPO is properly applied – checked when user is logged in to the TS. User config part shows LOCKDOWN_policyname. That for me means Loopback applied user settings of User part of GPO applied on OU where TS servers resides.
Then checked Resultant in GPMC. No errors, everything looks nice but no effect on logged in user. When logged in can access CP and see restricted drives.