Windows Server 2016 RDS Shadow

Alex_77 1 Reputation point

Hi all !
I installed a Windows Server 2016 with RDS Users and 3 Help Desc User supporting the other RDS Users with Shadow access.
The only point is, i would like to prevent everyone shadowing one specific user for security concerns. Is there a registry or a group condition that prevents everyone from shadow one predefined user? Or at least warn the user before granting access for shadow ?

Greets !

Remote Desktop
Remote Desktop
A Microsoft app that connects remotely to computers and to virtual apps and desktops.
4,225 questions
0 comments No comments
{count} votes

3 answers

Sort by: Most helpful
  1. Eleven Yu (Shanghai Wicresoft Co,.Ltd.) 10,671 Reputation points Microsoft Vendor


    You can use below group policy to set the shadow security on the server.
    Computer Configuration\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Connections
    Set rules for remote control of Remote Desktop Services user sessions



    If the Answer is helpful, please click "Accept Answer" and upvote it. Thanks.

    0 comments No comments

  2. Alex_77 1 Reputation point

    Thanks for the answer.

    That's not what i am searching for. This setting is global. I am searching something for one particular user.
    In detail, every user should be able to be shadowed - except one.

    0 comments No comments

  3. MTG 1,196 Reputation points

    No, you can't set rules for single users.
    Since admins may spy anyway (not only with shadowing), users fearing to be spied on should not use that server.

    0 comments No comments