Disable AUP via Group Policy Server 2016

[RichB]

Good Morning All,

 

I am building a new 2016 RDS Farm on VMware.

 

When the users log into the RemoteApps section is makes them accept the AUP on the Web Access Server.

 

SO... long story short I need to disable the AUP policy appearing on this server and want to do it via Group Policy anyone know where this GP is? I cannot seem to find it.

 

Thanks

[Ageekin10]

Hi Richard

 

By AUP i'm assumming you are on about the "Interactive logon" messgae that users click OK to login and type their details. I havent used windows server 2016 rds yet but i can only assume

 

Im sure you have a resson but they should still accept these terms when using a remote app, I would not recommend this but im here providng technical advice not legal.

 

This Policy is located at "Computer Configuration" -> "Policies" -> "Windows Settings" -> "Secuirty Settings" -> "local Polices" -> "Secuirty Options" -> "Interactive logon: Message text for users attempting to log on"

 

The only way (I can see) you would stop this is to make a new GPO with only the Interactive logon: Message text for users attempting to log on policy and then apply this to all computers but then in the "Delegation" Tab Deny the computer that you don't want this to apply to.

 

You might also need to go into the local group Policy editor for that machine and remove the text as i dont think the group policy will remove the setting. use can get into the local group polocy by using the MMC conole on the local machine.

 

Thanks

Edited April 5, 2018 by Ageekin10

[RichB]

This is what I ended up doing to resolve the issue:

 

I copied the default domain policy into a new OU where the RDS servers are - removed the the AUP message (set to not configured) located here "Computer Configuration" -> "Policies" -> "Windows Settings" -> "Secuirty Settings" -> "local Polices" -> "Secuirty Options" -> "Interactive logon: Message text for users attempting to log on"

 

Rebooted the RDS web access server, job done and working.

@Ageekin10 - We have chosen to remove the AUP as the users are accessing these remote apps internally so have already accepted the AUP once on log on, so need to do it for a 2nd.

[Ageekin10]

@RichB i always assume remote apps are external but good point if they are only internal remote apps.

 

Glad you managed to resolve the issue

[RichB]

@Ageekin10 its a strange one, its an external bit of software coming through a new RDS system and is been accessed globally but on an internal network. There are to many changes to the system and DB to make it a usual .exe roll out with shares.

 

Also means i got the play with some new Dell FX2 kit with 3.something TB of Memory and 120 core processors!