Solved

Group Policy inheritance question

Posted on 2014-10-14
2
151 Views
Last Modified: 2014-10-14
I have a problem on a live 2003 server - need to edit policies (I think) to enable users to login thru RDP.

Now, admins already have that privilege, and I would need to set "Allow log on through Terminal Services" policy to contain my users.

Now, if I link this policy - will it OVERRIDE default domain policy, or ADD to the list of users that login?

I am _VERY_ afraid not to lock myself out.
0
Comment
Question by:mrmut
2 Comments
 
LVL 13

Accepted Solution

by:
Rizzle earned 500 total points
ID: 40381132
This should add users to allow list to use RDP but as a precaution put domain admins or your admins in the list aswell.
0
 
LVL 24

Expert Comment

by:VB ITS
ID: 40381320
I think it'll replace the list of users. Easier to just do what Roshan has recommended above, i.e. add the existing accounts that already have RDP access into your new policy, add the new users/groups that require RDP access, then link the new policy.

If it's just a single server though, you can just modify the Remote Desktop Users group in System PropertiesRemote tab > Select Remote Users... at the bottom > add the required users/security group to the list. No need to mess with Group Policies that way.
0

Featured Post

Zoho SalesIQ

Hassle-free live chat software re-imagined for business growth. 2 users, always free.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This may not be a text book method to resolve VSS backup issues but it seemed to have worked on few of the Windows 2003 servers we had issues while performing a Volume Shadow Copy backup. If you have issues while performing a shadow copy backup usin…
Scenerio: You have a server running Server 2003 and have applied a retail pack of Terminal Server Licenses.  You want to change servers or your server has crashed and you need to reapply the Terminal Server Licenses. When you enter the 16-digit lic…
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …
This video demonstrates how to create an example email signature rule for a department in a company using CodeTwo Exchange Rules. The signature will be inserted beneath users' latest emails in conversations and will be displayed in users' Sent Items…

947 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now