Link to home
Start Free TrialLog in
Avatar of Karen Jones
Karen Jones

asked on

Can a GPO add users to "Remote Desktop Users" without overwriting the existing members

How can I use Group Policy to add users to the Remote Desktop users group?
i.e. I need to "append" to the group on the target server rather than replace/remove any existing users.

The long version:
We have a bunch of development servers. I need to ensure that certain groups always have remote desktop access.  But each server also has a couple of specific user accounts that need to have remote desktop access. And these accounts vary from server to server.

When I use Group Policy & set the members of the Restricted Group "Remote Desktop Users", this removes any existing users that are already in the "Remote Desktop Users" group.

What is the best way to achieve my goal?
ASKER CERTIFIED SOLUTION
Avatar of Sean Bravener
Sean Bravener

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Karen Jones
Karen Jones

ASKER

Sean,
Do you mean like this:
  • Create domain group called say "TeamCity Test Accounts"
  • Create the local accounts as required on each server
  • Add the local accounts to the new domain group
  • Add the new domain group as a member of the Restricted Group RDU in GP
Exactly