Windows 10: Error applying GPO to restrict remote desktop for local Admins that are not domain accounts...

Hello we are having errors to apply the GPO to restrict RDP access for the usersError applying GPO to restrict remote desktop for local Admins that are not domain accounts SID S-1-5-114GPO resembles:RSOP gives:clicking on the item shows the abovelog shows the below as well from winlogon:Q: how Any idea how to proceed to gather mode data or where the problem may be?Many thanks.

:)

 

Local Admin Rights & Remote Desktop Access Permission

Hello All,

Good morning!

In my environment now a days its difficult to manage granting Local Admin Rights and RDP access to the particular users on their particular host , as the GPO size is increasing to assign separate policy though "Restricted Group" settings.

Even I have tried to applied through Group Policy Preference setting by using ITEM LEVEL TARGETTING option, the settings doesn't worked properly.

So please suggest me the right setting to manage those by one GPO per domain or site or ou.

Note: Usually when we apply this setting through GPO the users who already had access on it they will be loosing the rights as pushing from GPO. So manually adding them to GPO to avoid those conflict.

So suggest the right thing . . .

Thanks in advance.

Regards,

RamS

 

GPO local admin access for Domain user

Hi,

I have a question regarding the GPO that I created for certain domain user to get local admin access in their computer.

I have created new GPO in domain and do the setting as what I have learned.

They policy I enabled located at Computer Configuration but not User Configuration.

The question is :

If User A have local admin access logon on his PC, are User B or following user able to gain this local access right too when they logon into the same PC?

Regards,

Keith

 

Syncronize domain accounts customization same as Local account admin

Domain account is an independent user account with its own profile. It has basically nothing to do with a local account and its customisations. A domain admin can have set various group policies to be applied when user has joined a domain, but these policies and settings do not apply to local account. Further, another domain account is again an independent user account and has independent profile.

On a single user PC with one local account and one domain account there are therefore two totally different user accounts and profiles, although they both belong to same user.