I would like to give a handful of remote users access to their application server via RDP. The sessions are currently active BUT I have not applied any lockdowns yet.
For example, When they select START, SHUT DOWN, the only options I would like them to see is either disconnect or Log off and NOT shut down and restart, hopefully for the obvious reasons.
How do I create an OU in AD which is indicative of 1. the RDP sessiosn and 2. Is there a comprehensive list, breakdown as to which settings will allow me to perform these restrictions?