Windows 10: Unable to update remote group policy on workstations

Unable to update remote group policy on workstationsGetting RPC Server is unavailableDCDIAG /TESTNS /V /E /F:dcdiag.txtresults show broken delegation. Unable to run remote group policy update on workstation Delegated domain name: domainname.domainnameWarning: Delegation of DNS server server. is broken on IP:x.x.x.x Error: DNS server: server IP:x.x.x.x [Broken delegation]

:)

 

Win10 domain workstation, "currently no power options available", tied to group security policy and remote desktop connection

Hello Windows community.

I know there are many threads about the issue of the dreaded "There are currently no power options available." But I haven't found one that fixes my problem.

Initial issue: Windows 10 Pro PC's, connected to a work domain (Windows Server 2012), get the "There are currently no power options available" message when trying to shutdown or restart the PC.

Action taken: Group Policy Editor > Computer Configuration > Windows Settings > Security Settings > Local Policies > User Rights Assignment > 'Shut down the system' ... The only way to add the user to the list of users for this policy, is
to log on to the server itself, go into Group Policy Management Editor, delve into the domain controller, find the policy, and add the user there.

Result: After restarting the Win10 Pro workstation, the power options are now available from the start menu. Yay... HOWEVER...

New issue: If I use "remote desktop connection" on the workstation, and connect to the server, the user now has the permission to access restart and shutdown options from the start menu for the server itself... Which is not acceptable. We
can't have people accidentally turning off the server through their remote desktop connection (which is used frequently, in order to access MYOB on the server).

EDIT Question: How can I add "users" to this policy for only the workstations, and not when they are connected to the server through Remote Desktop Connection?

Additional information:

• EDIT: I noticed on
  Technet, that the defaults for the policy is different depending on whether it is for "workstations and servers" or for "Domain Controllers". The "Workstations and servers" policy includes the group "users", whilst the "domain controllers" policy does not.
• Windows 7 Pro PC's, connected to the domain in the exact same way, do not have the issue. All users on Windows 7 PC's are not added to the security policy, they CAN access shut down options for their local PC, but CANNOT access shutdown options for the
  server during a remote desktop connection. This means it is working as intended for Windows 7 Pro PC's.
• The current list of users and groups that are listed in the security policy is as follows:
  • Administrators
  • Backup Operators

Thank you in advance for any help.

Sincerely,

Jeremy

 

Can a parent/ admin user in my Microsoft Family group remotely access other users? Please reply asap.

Hi, Sam7564 I'm Yanecsy and I'm an independent advisor.

I'm here to help you.

This policy setting determines the users or groups that can access the home screen of a remote device through a Remote Desktop Services connection. It is possible for a user to establish a Remote Desktop Services connection to a particular server, but not be
able to log in to that server's console.

To control who can open a Remote Desktop Services connection and log on to the device, add or remove user from the Remote Desktop Users group.

Location, Computer Configuration \ Windows Settings \ Security Settings \ Local Policies \ User Rights Assignment

Predetermined values

By default, members of the Administrators group have this right on domain controllers, workstations, and servers. The Remote Desktop User group also has this right on workstations and servers. The following table lists the actual and current default policy
settings. The default values are also listed on the policy's property page.

Regards.

Yanecsy

 

after windows 10 pro upgrade - no "remote desktop users" group

After Pro upgrade, I was unable to assign users to allow remote desktop. "Select Users ..." button is greyed out.

There is no "Remote Desktop Users" group

Tried manually adding the group with no success.

Also tried group policy with no success.

Any suggestions?