RDS 2012r2 server User rights
I have set up a stand alone Win 2012r2 server with no Domain and no AD for a client that need to have some applications totally isolated from their normal domain.
I have experience with WIndows servers but this is the first time I am doing RDS on a 2012r2.
I did a very simple setup based on the following instruction_
https://www.youtube.com/watch?v=AkY5ws4X5R4&t=132s
I can now access the server desktop via "Remote Desktop Connection" app.
I have two users: Administrator and TestUser. TestUser is member of the local Remote desktop users group and the local users group. Administrator is only a member of the local administrators group.
Now to my problem: Both Administrator and TestUser seem to have full Access to everything on the Server,
How do i restrict the regular users from seeing and running applications like Server manager that should only be available. to administrators?
A secondary issue: I am able to connect to the server via the web interface from the net. After login however i only see a screen "Work resources" and under RemoteApp and Desktops I see "Current folder:/". I suppose that further configuration is required here but I can not find out how to do it on a stand alone server.
This is a rather urgent project and I would be willing to pay for some expert consulting on RDS setup on a stand alone server. I have access to the server both through Teamviewer and remote desktop app.
I look forward to expert advice.
Best regards
Göran Wester
I have experience with WIndows servers but this is the first time I am doing RDS on a 2012r2.
I did a very simple setup based on the following instruction_
https://www.youtube.com/watch?v=AkY5ws4X5R4&t=132s
I can now access the server desktop via "Remote Desktop Connection" app.
I have two users: Administrator and TestUser. TestUser is member of the local Remote desktop users group and the local users group. Administrator is only a member of the local administrators group.
Now to my problem: Both Administrator and TestUser seem to have full Access to everything on the Server,
How do i restrict the regular users from seeing and running applications like Server manager that should only be available. to administrators?
A secondary issue: I am able to connect to the server via the web interface from the net. After login however i only see a screen "Work resources" and under RemoteApp and Desktops I see "Current folder:/". I suppose that further configuration is required here but I can not find out how to do it on a stand alone server.
This is a rather urgent project and I would be willing to pay for some expert consulting on RDS setup on a stand alone server. I have access to the server both through Teamviewer and remote desktop app.
I look forward to expert advice.
Best regards
Göran Wester
Rob Williams
Though there are hacks on the Internet to work around it, Server 2012/ 2012 R2 requires a domain environment to use Remote Desktop services other than in 2 user admin mode. It also cannot be enabled on a domain controller, however, again there are hacks to do so. Previous server versions supported standalone RDS/TS servers.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Thank you David and Rob,
I suspected that this was the case.
Would the RDS Quick start wizard provide me with enough functionality to handle administrators and regular users with different rights? I.e. to see different sets of apps?
Best regards.
Göran Wester
I suspected that this was the case.
Would the RDS Quick start wizard provide me with enough functionality to handle administrators and regular users with different rights? I.e. to see different sets of apps?
Best regards.
Göran Wester
ASKER
Further to the above, I have a separate domain server "off.AktRed.local" on this network. I also have RDS licenses. I would then Connect the RDS server to the domain to become "RDSServer.off.Aktred,loca
As for the certificate. I will use the self generated one but what shall I name it? This domain is available on the internet on the dynamic DNS address aktivred.dynalias.com but it is also accessible via the URL aktivred.se that connects to aktivred.dynalias.com via webhop.
Can I put all the RDS related roles including the license server role on the RDS server.
Thank you in advance for any feedback
Göran
As for the certificate. I will use the self generated one but what shall I name it? This domain is available on the internet on the dynamic DNS address aktivred.dynalias.com but it is also accessible via the URL aktivred.se that connects to aktivred.dynalias.com via webhop.
Can I put all the RDS related roles including the license server role on the RDS server.
Thank you in advance for any feedback
Göran
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Thanks a million
Göran
Göran
Thanks Göran . By the way if your server license is a volume license you can use downgrade rights to use an earlier server version that does not require a Domain. I forget when the change happen but I think you can do so with Server 2008 and 2008 R2.