Solved

Setting a domain level group policy to enable remote control for all desktops

Posted on 2008-10-21
11
1,005 Views
Last Modified: 2012-05-05
I would like to set a domain level group policy that enables remote desktop on all PC's connected to the domain on a SBS 2003 server.
0
Comment
Question by:JackAitken
  • 6
  • 4
11 Comments
 
LVL 13

Expert Comment

by:SagiEDoc
ID: 22773538
As far as I am aware this is set under computer's and users on the properties of the user under the remote control tab.
0
 
LVL 38

Expert Comment

by:Philip Elder
ID: 22773539
The http://connectcomputer wizard does this out of the box during the workstation configuration.
Philip
0
 
LVL 38

Expert Comment

by:Philip Elder
ID: 22773547
Are your users local admins? If they are, they can log on via the Remote Web Workplace.
You can manually enable the Remote Connection in the My Computer properties --> Remote tab. Then add any domain users to the Remote Desktop Users group on the local machine.
Otherwise, you will need to modify GPOs and setup others to get things done ... which defeats the purpose since SBS has all that setup for you already.
Philip
0
Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

 

Author Comment

by:JackAitken
ID: 22776551
Thanks for the comments, but I know how to set it up manually.  What I would like to do is set a group policy that enables remote desktop on the PC's automatically so when a PC is added to the domain, it doesn't have to be set manually, the group policy takes care of it.

Thanks
0
 
LVL 38

Accepted Solution

by:
Philip Elder earned 500 total points
ID: 22777575
SBS has this built-in by default. When the http://ConnectComputer wizard is used to connect the computer to the domain, you choose the users that are going to be on the system. Once the wizard completes the install routine, those users are able to RDP via RWW or VPN or LAN.
Philip
0
 

Author Comment

by:JackAitken
ID: 22777644
I'll need to try the connectcomputer option.  I've never used that option before.  I'll look it up.  

On existing servers, and Windows2003 non SBS domains, what would be the solution using group policy?

Thanks
0
 
LVL 38

Expert Comment

by:Philip Elder
ID: 22777909
Enable the logon via Terminal Services in your default domain policy. Add your domain users to the local computer's Remote Desktop Users group.
Not a good idea on the SBS domain because that will mess things up even more.
Philip
0
 

Author Comment

by:JackAitken
ID: 22885984
Sorry for the delayed response.  I'm short handed and have been burried.  Philip, why would setting a group policy defaulting to enabled remote control on the PC mess things up in an SBS environment.

Thanks
0
 
LVL 38

Expert Comment

by:Philip Elder
ID: 22886779
Jack,
Because SBS has everything setup for you by default. Use the wizards, follow the SBS best practices and things work.
Don't follow them, make changes with the various components, and things break.
Philip
0
 

Author Closing Comment

by:JackAitken
ID: 31508620
Using connectcomputer only assigns the 1 user that was specifed when creating the package.  I now have Kaseya and connect with KVNC, and then run a script to enable remote connections.

Thanks
0
 
LVL 38

Expert Comment

by:Philip Elder
ID: 24370801
The script works, but if you choose the option to set multiple users in the ConnectComputer wizard and authenticate with the domain admin credentials, then any number of users can be allowed to RDP in.

Philip
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Introduction At 19:33 (UST) on Tuesday 21st September the long awaited email arrived with the subject title of “ANNOUNCING THE AVAILABILITY OF WINDOWS SBS 7 PREVIEW”.  It was time to drop whatever I was doing and dedicate as much bandwidth as possi…
You may have discovered the 'Compatibility View Settings' workaround for making your SBS 2008 Remote Web Workplace 'connect to a computer' section stops 'working around' after a Windows 10 client upgrade.  That can be fixed so it 'works around' agai…
In a recent question (https://www.experts-exchange.com/questions/29004105/Run-AutoHotkey-script-directly-from-Notepad.html) here at Experts Exchange, a member asked how to run an AutoHotkey script (.AHK) directly from Notepad++ (aka NPP). This video…

809 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question