<div>
Usually you override these settings at the server itself -&gt;rdp configuration.
</div>


Usually you override these settings at the server itself ->rdp configuration.

<div>
I am going to do this via a group policy which I know how to do but I want to make sure Desktop admins cannot change this
</div>


I am going to do this via a group policy which I know how to do but I want to make sure Desktop admins cannot change this

<div>
I am saying dekstop admins have rights that I want to block only on the particlar registry keys for RDP
</div>


I am saying dekstop admins have rights that I want to block only on the particlar registry keys for RDP

<div>
also I would like toapply this at the user level not the computer so admins with the correct rights can still use this
</div>


also I would like toapply this at the user level not the computer so admins with the correct rights can still use this

<div>
Look at <a href="http://support.microsoft.com/kb/293655/en-us" rel="ugc nofollow">http://support.microsoft.com/kb/293655/en-us</a>
</div>


Look at http://support.microsoft.com/kb/293655/en-us [http://support.microsoft.com/kb/293655/en-us]

<div>
<div class="content wysiwyg-content">
I am going to create a group policy that blocks drive redirection,port redirection, and pritner redirection at the user level. However I want to stop the users from chaning this registry key as well. I am concerend becuase I dont want a local admin to change the policy and then the AD group policy does not get applied. Possibly a script or soemthign when the user log on,etc. Any ideas
</div>
</div>


I am going to create a group policy that blocks drive redirection,port redirection, and pritner redirection at the user level. However I want to stop the users from chaning this registry key as well. I am concerend becuase I dont want a local admin to change the policy and then the AD group policy does not get applied. Possibly a script or soemthign when the user log on,etc. Any ideas

Changing RDP setting via group policy

Active Directory (AD) is a Microsoft brand for identity-related capabilities. In the on-premises world, Windows Server AD provides a set of identity capabilities and services, and is hugely popular (88% of Fortune 1000 and 95% of enterprises use AD). This topic includes all things Active Directory including DNS, Group Policy, DFS, troubleshooting, ADFS, and all other topics under the Microsoft AD and identity umbrella.

Active Directory

Windows Server 2008 and Windows Server 2008 R2, based on the Microsoft Vista codebase, is the last 32-bit server operating system released by Microsoft. It has a number of versions, including including Foundation, Standard, Enterprise, Datacenter, Web, HPC Server, Itanium and Storage; new features included server core installation and Hyper-V.

Windows Server 2008

Windows Server 2003 was based on Windows XP and was released in four editions: Web, Standard, Enterprise and Datacenter. It also had derivative versions for clusters, storage and Microsoft’s Small Business Server. Important upgrades included integrating Internet Information Services (IIS), improvements to Active Directory (AD) and Group Policy (GP), and the migration to Automated System Recovery (ASR).