Link to home
Start Free TrialLog in
Avatar of Rammy Charles
Rammy CharlesFlag for United States of America

asked on

Add Domain User to Local Remote Desktop Group via Group Policy

I am looking for a way to add a domain user account to their workstations Remote Desktop group via GP.

Basically all of our users should have RDP access to their own office desktops here in the office. We have noticed that some users are missing out of that group therefore do not have RDP access to their machines. Rather than manually checking this group and adding their domain user accounts individually, is there a way this can be done centrally? I assume GP would be the best way to go about doing this but I am opened to other 3rd party solutions as well.

Any suggestions would be appreciated.

About the environment:

Desktops: Windows 7 Pro x64
Servers: Server 2008 R2
Domain Controllers: Mostly Server 2008 R2
Domain Level: 2003
Avatar of Brian Pierce
Brian Pierce
Flag of United Kingdom of Great Britain and Northern Ireland image

Avatar of Rammy Charles

ASKER

Thanks but we are not looking to add a AD group to the Local RDP group. We are looking to add the AD user whom the machine belongs to. Is there a way to add any user account that has logged into the machine to the local RDP group?
Avatar of NKRC
NKRC

You can use WinVNc . This is a third party software that you can install in the users system. They just need to put the IP and will get the remote control of the others system.
Not sure how this will help me out here. I do not need remote access to the users desktop.
Hi.

If you used restricted groups and added the group "domain users" to the local group remote desktop users, you would be fine. Remember, only who may login locally may also login via RDP, so this should not tear up a security hole.
ASKER CERTIFIED SOLUTION
Avatar of vak73
vak73

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial