Remote access and user permissions (via registry)

[armadillo]

Hi everyone, we recently implemented remote access for students and staff using windows remote desktop. I was wondering if there is a way of adding users and right permissions via regedit? Administrator users have an automatic "allowed access" but domain users would need to be addedmanually, hence why I am aasking of a way of doing so via the registry, so I could build a package and deploy it into 200+ PCS. If users and permissions aren't added to remote desktop you'd get an eror message "you haven't access to this session"

 

Any help would be appreciated and thanks in advance.

[strawberry]

So your trying to allow RDP to more than one machine? if so you can use the groups in a GPO to add users to the remotedesktop users group. Apologies if thats not what your tryingt o do!

 

linky http://groups.google.com/group/microsoft.public.windows.msi/browse_thread/thread/3bfaf8d52a0f8650/2a6c9d07514c3d18?q=group+policy+local+administrator&_done=/groups?q%3Dgroup+policy+local+administrator%26start%3D20%26hl%3Den%26lr%3D%26&_doneTitle=Back+to+Search&&d&pli=1

[armadillo]

Thanks strawberry for your prompt reply. Also the issue I am having is that the gpo isn't being filtered to the workstations either; is there a way of forcing it?

Thanks

[Steve21]

Thanks strawberry for your prompt reply. Also the issue I am having is that the gpo isn't being filtered to the workstations either; is there a way of forcing it?

Thanks

 

If you mean it's just not running as such, you could do a "gpupdate /force" to force them on, but is there any reason they're not applying? Seeing it should every logon.

 

Steve

[somabc]

You can also do it by script

 

net localgroup "Remote Desktop Users" domain\group_or_user /add

[armadillo]

If you mean it's just not running as such, you could do a "gpupdate /force" to force them on, but is there any reason they're not applying? Seeing it should every logon.

 

Steve

 

Thanks for your reply steve; I tried gpupdate /force as well. I have the gpo on the top in group policy manager too.

[armadillo]

You can also do it by script

 

net localgroup "Remote Desktop Users" domain\group_or_user /add

 

Thaks for your reply somabc, I will try thr script, I was hoping the gpo would do it. Also, the "remote desktop group" mentioned above, is it a workstation local group or a domain?

Thanks

[strawberry]

It's local to the pc, if you've done it right in Gp it should put a domain group into the local group

[armadillo]

So your trying to allow RDP to more than one machine? if so you can use the groups in a GPO to add users to the remotedesktop users group. Apologies if thats not what your tryingt o do!

 

linky Adding a global user to the local Administrator&#39s Group - microsoft.public.windows.msi | Google Groups

 

Hi Strawberry, I tried your suggestion above and it has worked; does it mean the users will be less locked if they are members of local admin?

Thanks for your help.

[strawberry]

It does, I didn't mean for you to add them to the local admin though!, remove them from that and add them to the remote desktop users group, that'll be enough to let them use rdp!

[armadillo]

It does, I didn't mean for you to add them to the local admin though!, remove them from that and add them to the remote desktop users group, that'll be enough to let them use rdp!

 

Is the remote desktop users group a locval or domain group?

 

Thanks

[strawberry]

local.