{"id":1178,"date":"2020-06-10T08:57:41","date_gmt":"2020-06-10T13:57:41","guid":{"rendered":"http:\/\/sites.williams.edu\/lj1\/?p=1178"},"modified":"2020-06-10T09:19:09","modified_gmt":"2020-06-10T14:19:09","slug":"windows-10-remote-desktop-access-for-ad-group","status":"publish","type":"post","link":"https:\/\/sites.williams.edu\/lj1\/labs\/windows-10-remote-desktop-access-for-ad-group\/","title":{"rendered":"Windows 10 – Remote Desktop Access for AD group"},"content":{"rendered":"

To allow users in an AD group to access windows 10 desktops remotely …<\/p>\n

1) Create the group as a global group in the AD<\/p>\n

2) Create an OU for computers that will be in the “Remote Access Pool”<\/p>\n

3) Create a GP object that is linked and enforced for that OU with the following settings:<\/p>\n

In Computer Configuration – Preferences – Local Users and Groups – Group – Remote Desktop Users<\/strong> add the AD group setup above with Action = Update<\/strong> (see screen shot below)<\/p>\n

\"\"<\/a><\/p>\n

The Update action is required to update this remote desktop users group every time GP update runs.<\/p>\n

A reboot isn’t necessary but, since GP updates don’t happen all the time, you might want to run in an administrative cmd window the command:<\/p>\n

gpupdate \/force<\/p><\/blockquote>\n

Also note – you may want to carefully consider related remote desktop settings like allowing only one remote connection at setting a realistic time for disconnecting both idle and disconnected sessions.<\/p>\n

Lastly, be sure that you understand remote desktop securely. Your systems should not be accessible from the internet. There are lots of RDP security threats so keep them behind a firewall that does not allow access unless running something like VPN.<\/p>\n","protected":false},"excerpt":{"rendered":"

To allow users in an AD group to access windows 10 desktops remotely … 1) Create the group as a global group in the AD 2) Create an OU for computers that will be in the “Remote Access Pool” 3) … Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":55,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[10086],"tags":[73558],"class_list":["post-1178","post","type-post","status-publish","format-standard","hentry","category-labs","tag-remote"],"acf":[],"_links":{"self":[{"href":"https:\/\/sites.williams.edu\/lj1\/wp-json\/wp\/v2\/posts\/1178","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sites.williams.edu\/lj1\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sites.williams.edu\/lj1\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sites.williams.edu\/lj1\/wp-json\/wp\/v2\/users\/55"}],"replies":[{"embeddable":true,"href":"https:\/\/sites.williams.edu\/lj1\/wp-json\/wp\/v2\/comments?post=1178"}],"version-history":[{"count":3,"href":"https:\/\/sites.williams.edu\/lj1\/wp-json\/wp\/v2\/posts\/1178\/revisions"}],"predecessor-version":[{"id":1182,"href":"https:\/\/sites.williams.edu\/lj1\/wp-json\/wp\/v2\/posts\/1178\/revisions\/1182"}],"wp:attachment":[{"href":"https:\/\/sites.williams.edu\/lj1\/wp-json\/wp\/v2\/media?parent=1178"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sites.williams.edu\/lj1\/wp-json\/wp\/v2\/categories?post=1178"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sites.williams.edu\/lj1\/wp-json\/wp\/v2\/tags?post=1178"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}