Changing RDP setting via group policy

I am going to create a group policy that blocks drive redirection,port redirection, and pritner redirection at the user level. However I want to stop the users from chaning this registry key as well. I am concerend becuase I dont want a local admin to change the policy and then the AD group policy does not get applied. Possibly a script or soemthign when the user log on,etc. Any ideas
ullmannericAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

McKnifeCommented:
Usually you override these settings at the server itself ->rdp configuration.
ullmannericAuthor Commented:
I am going to do this via a group policy which I know how to do but I want to make sure Desktop admins cannot change this
McKnifeCommented:
I am talking about GPOs, too. Local GPOs at the server side. Those can only be changed by admins at the remote server. Or are you saying your users have admin rights not only locally but at the server?

If you prefer to do it locally, please tell me: is there any setting you can impose to local admins that those cannot change if they wanted to? No. Any GPO setting can be manipulated by local admins at registry level because they can take ownership of regkeys and afterwards modify those.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Protecting & Securing Your Critical Data

Considering 93 percent of companies file for bankruptcy within 12 months of a disaster that blocked access to their data for 10 days or more, planning for the worst is just smart business. Learn how Acronis Backup integrates security at every stage

ullmannericAuthor Commented:
I am saying dekstop admins have rights that I want to block only on the particlar registry keys for RDP
ullmannericAuthor Commented:
also I would like toapply this at the user level not the computer so admins with the correct rights can still use this
McKnifeCommented:
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.