<div>
Use the GPO but set the settings under &quot;User Configuration&quot; and don't apply it to the OU's containing the domain admins. This would require that the Admins are in another OU which can be particularity useful for situations like this where admins require different settings than regular users
</div>


Use the GPO but set the settings under "User Configuration" and don't apply it to the OU's containing the domain admins. This would require that the Admins are in another OU which can be particularity useful for situations like this where admins require different settings than regular users

<div>
<div class="content wysiwyg-content">
I need to lock down some OS functions like Shutdown/Restart, RUN command for all RDS sessions, except Domain Administrator. Would this possible? I understand if I use GPO, it will apply to all logon users. Thanks.
</div>
</div>


I need to lock down some OS functions like Shutdown/Restart, RUN command for all RDS sessions, except Domain Administrator. Would this possible? I understand if I use GPO, it will apply to all logon users. Thanks.

Lock Down Windows 2008 R2 Remote Desktop Services

The Microsoft Legacy Operating System topic includes legacy versions of Microsoft operating systems prior to Windows 2000: All versions of MS-DOS and other versions developed for specific manufacturers and Windows 3/3.1, Windows 95 and Windows 98, plus any other Windows-related versions, and Windows Mobile.