restricted RDP login

Portal Home > Knowledgebase > Articles Database > restricted RDP login

Posted by prashant1979, 09-14-2011, 05:39 AM
I want to create a RDP login for a few servers with restricted privileges. I have a few staff members to whom I want to provide a RDP user for all servers from where they can restart services. Apart from that they should not be allowed to do anything else. How can I create such a restricted user for RDP?
Posted by pageshoppe, 09-14-2011, 08:49 AM
Did you refer this link technet[dot]microsoft[dot]com/en-us/library/ee791756%28WS[dot]10%29[dot]aspx It describes the various options available for the RDP protocol.
Posted by centauricw, 09-15-2011, 12:44 PM
RDP itself is nothing but a protocol for connecting to a Windows server using Remote Desktop. It neither grants or restricts what a user can do on the server. All the magic is contained in the permissions granted to the user account, which can customized using Group Policies (Local Security Policies on a standalone system) and NTFS file permissions (among others). You will probably want to create a security group (or groups) with the allowed rights and permissions and then add the users to this group. If you remove the users from the Users group, then they will only have the rights you granted to the custom security group(s).
Posted by Motiv, 09-15-2011, 04:39 PM
Did you get this resolved? Very easily done via Group Policy. User will need to be in the Remote Desktop Users group and then you will need to apply Group Policy properly to allow them to restart service(s)