Windows Server 2016 RDS Shadow

Alex_77 1 Reputation point
2020-11-27T01:02:46.533+00:00

Hi all !
I installed a Windows Server 2016 with RDS Users and 3 Help Desc User supporting the other RDS Users with Shadow access.
The only point is, i would like to prevent everyone shadowing one specific user for security concerns. Is there a registry or a group condition that prevents everyone from shadow one predefined user? Or at least warn the user before granting access for shadow ?

Greets !
Alex

Remote Desktop
Remote Desktop
A Microsoft app that connects remotely to computers and to virtual apps and desktops.
3,204 questions
No comments
{count} votes

3 answers

Sort by: Most helpful
  1. Eleven Yu (Shanghai Wicresoft Co,.Ltd.) 10,541 Reputation points Microsoft Vendor
    2020-11-27T03:38:25.483+00:00

    Hi,

    You can use below group policy to set the shadow security on the server.
    Computer Configuration\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Connections
    Set rules for remote control of Remote Desktop Services user sessions

    Thanks,

    Eleven

    If the Answer is helpful, please click "Accept Answer" and upvote it. Thanks.

  2. Alex_77 1 Reputation point
    2020-11-27T09:42:51.35+00:00

    Hey
    Thanks for the answer.

    That's not what i am searching for. This setting is global. I am searching something for one particular user.
    In detail, every user should be able to be shadowed - except one.

  3. MTG 911 Reputation points
    2020-11-27T14:24:32.347+00:00

    No, you can't set rules for single users.
    Since admins may spy anyway (not only with shadowing), users fearing to be spied on should not use that server.