Changing RDP setting via group policy

I am going to create a group policy that blocks drive redirection,port redirection, and pritner redirection at the user level. However I want to stop the users from chaning this registry key as well. I am concerend becuase I dont want a local admin to change the policy and then the AD group policy does not get applied. Possibly a script or soemthign when the user log on,etc. Any ideas
ullmannericAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

McKnifeCommented:
Usually you override these settings at the server itself ->rdp configuration.
0
ullmannericAuthor Commented:
I am going to do this via a group policy which I know how to do but I want to make sure Desktop admins cannot change this
0
McKnifeCommented:
I am talking about GPOs, too. Local GPOs at the server side. Those can only be changed by admins at the remote server. Or are you saying your users have admin rights not only locally but at the server?

If you prefer to do it locally, please tell me: is there any setting you can impose to local admins that those cannot change if they wanted to? No. Any GPO setting can be manipulated by local admins at registry level because they can take ownership of regkeys and afterwards modify those.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

ullmannericAuthor Commented:
I am saying dekstop admins have rights that I want to block only on the particlar registry keys for RDP
0
ullmannericAuthor Commented:
also I would like toapply this at the user level not the computer so admins with the correct rights can still use this
0
McKnifeCommented:
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.