Improve company productivity with a Business Account.Sign Up

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 75
  • Last Modified:

Can a GOP that allows to connect remotely be link to users or need to link to computer

This is how I enabled for users to connect remotely to their computers in the domain

1.      Created a Security Group named RDC
2.      Right-click the new Group and select properties. at Members tab Add the Names or Groups you wish to allow connecting remotely.
4.      Create a GPO. Edit.
5.      Computer Configuration - Policies - Windows Settings - Security Settings - Restricted Groups
6.      Right-click the Restricted Groups folder and click Add Group, enter the name of the Security Group just created.
7.      Right-click the Group, Properties.
8.      Next to the This Group is member of: Add Remote Desktop Users
9.      Navigate to: Computer Configuration - Policies - Administrative Templates - Windows Components - Remote Desktop Services - Remote Desktop Session Host - Connections. Set: Allow users to connect remotely by using Remote Desktop Services.
10.      Network Level Authentication Computer Configuration - Policies - Administrative Templates - Windows Components - Remote Desktop Services - Remote Desktop Session Host - Security. Set require user authentication for remote connections by using Network Level Authentication Enable.
11.      Computer Configuration\Administrative Templates\Network\Network Connections\Windows Firewall\Domain Profile\ Edit: Windows Firewall: Allow Inbound Remote Desktop exceptions: Enable.
12.      Browse to the OU for your computers you want to allow remote desktop connection and link the policy.

Question: does this policy need to  be linked to a OU that have in it the computers I want to allow access remotely or can I place the new created security group in a new OU and link the GOP to it [meaning it will be linked to users not to computers]?
0
Abraham Deutsch
Asked:
Abraham Deutsch
1 Solution
 
Adam BrownSr Solutions ArchitectCommented:
The GPO settings you have outlined has to be linked to an OU with computer objects in it to apply.

GPOs will also never apply to security groups, so if you create an OU and put a security group in there, the GPO won't apply to the users in that group. You would need to link it to an OU with all the users in it, then change the security of the GPO so only the security group can apply it.
0
 
Abraham DeutschIT professionalAuthor Commented:
Thank you
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

NEW Internet Security Report Now Available!

WatchGuard’s Threat Lab is a group of dedicated threat researchers committed to helping you stay ahead of the bad guys by providing in-depth analysis of the top security threats to your network.  Check out this quarters report on the threats that shook the industry in Q4 2017.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now