none
RDS - Domain user can to see all collections without having permissions on the collections. RRS feed

  • Question

  • I to all!!!.

    We have a issue with our RDS deployment.

    We do not know why in our deploy, all domain users can see all collections without having permissions to collections.

    We know that an user can to use a remoteapp if first, to have collections access and then applications access. But in our case, they have access to all collections!!!. We are using RDS in Windows Server 2016 Standard.

    Thursday, April 22, 2021 6:45 PM

All replies

  • You can add some granularity regarding who has access to the Remote Desktop collections in your deployment.

    https://docs.microsoft.com/en-us/windows-server/remote/remote-desktop-services/rds-user-management

    https://docs.microsoft.com/en-us/mem/configmgr/core/servers/deploy/configure/configure-role-based-administration



    Tuesday, April 27, 2021 7:48 PM
  • You can use AD DS to grant permission to users who need to use the remote resources.
    In Server Manager on the server AD DS, click Tools > Active Directory Users and Computers.
    Expand the domain in the left pane to display its subfolders.
    Right-click the folder in which you want to create the group, and then click New > Group.
    Type an appropriate group name, and then select Global and Security.
    Saturday, May 15, 2021 11:31 AM
  • You can use AD DS to give users who need to access remote resources permission.

    Click Tools > Active Directory Users and Computers in Domain Manager on the AD DS server. To see the subfolders of a domain, expand it in the left pane. Right-click the folder where you want to build the group, then select New > Group from the context menu

    Select Global and Security after you've typed in a suitable group name.

    Tuesday, May 18, 2021 3:49 AM