Windows Server 2016 RDS Shadow

Question

Hi all !
I installed a Windows Server 2016 with RDS Users and 3 Help Desc User supporting the other RDS Users with Shadow access.
The only point is, i would like to prevent everyone shadowing one specific user for security concerns. Is there a registry or a group condition that prevents everyone from shadow one predefined user? Or at least warn the user before granting access for shadow ?

Greets !
Alex

Answer 1

Hi,

You can use below group policy to set the shadow security on the server.
Computer Configuration\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Connections
Set rules for remote control of Remote Desktop Services user sessions

Thanks,

Eleven

If the Answer is helpful, please click "Accept Answer" and upvote it. Thanks.

Answer 2

Hey
Thanks for the answer.

That's not what i am searching for. This setting is global. I am searching something for one particular user.
In detail, every user should be able to be shadowed - except one.

Answer 3

No, you can't set rules for single users.
Since admins may spy anyway (not only with shadowing), users fearing to be spied on should not use that server.