<div>
<div class="content wysiwyg-content">
The company I recently hired on with has domain controllers in each site with Backup Exec installed. Management wants the systems administrators to have remote desktop ability to manage the backups. Management only wants the administrtor in that site to have permissions to that DC and no others. To accomplish I this and be able to control individual access would be to create an OU in each site, copy the default DC policy to it, and add that administrator to the Allow access via Terminal Services. You also have to add the administrator to the Remote Desktop Users group. I have about 8 sites around the globe in which I have to configure. If there is a better way to accomplish this please pass along suggestions.<br />
Thanks
</div>
</div>


The company I recently hired on with has domain controllers in each site with Backup Exec installed. Management wants the systems administrators to have remote desktop ability to manage the backups. Management only wants the administrtor in that site to have permissions to that DC and no others. To accomplish I this and be able to control individual access would be to create an OU in each site, copy the default DC policy to it, and add that administrator to the Allow access via Terminal Services. You also have to add the administrator to the Remote Desktop Users group. I have about 8 sites around the globe in which I have to configure. If there is a better way to accomplish this please pass along suggestions.
Thanks

Active Directory OU Design and Remote Desktop Permissions

Active Directory (AD) is a Microsoft brand for identity-related capabilities. In the on-premises world, Windows Server AD provides a set of identity capabilities and services, and is hugely popular (88% of Fortune 1000 and 95% of enterprises use AD). This topic includes all things Active Directory including DNS, Group Policy, DFS, troubleshooting, ADFS, and all other topics under the Microsoft AD and identity umbrella.