Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment we need to find after we set below policy apply on customer's computers ,why below policy can not deny helper account remote/locally logon on customer's computer. it's very strange, I had tested successfully in my lab. now helper still can use msra remote control customer's computer ,but helper account can not remote logonĪnd locally logon customer's computer. But I also configured the below policy deny helper account to remote logon and locally logon customer's computer. I add helper account into the Customers local Administrator group on customer's win10 1903 pro. " I tried the solution but it didn't work for me."" " If we add the Account of the Helper into the Customers local Administrator group it works "" If you have feedback for TechNet Subscriber Support, New year !Thanks for your reply. Please remember to mark the replies as answers if they help. Ĭomputer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignmentĭeny log on locally add helper's account or add helpers groupĭeny log through remote desktop services add helper's account or add helpers group force on both DC and customer's computer.
this policy should not be applied to helpers' computers.after deploying below policy on costomer's computer ,we need to enter gpupdate i think we can deploy below domain policy for the OU which only contains customer's computers. My test environment:helpers' computer win10pro(1909), customer's computer win10pro(1903) Of course our Domain Admin works everytime but we have other "Helpers" who are not allowed to be local Administrators" "If we add the Account of the Helper into the Customers local Administrator group it works.
0 kommentar(er)
