RemoteApp User Assignment not filtering for members of trusted domain

Ruslan Nalivaika 106 Reputation points
2020-12-04T16:30:45.42+00:00

Hi all, I am troubleshooting a relatively new RDS setup and need to assign different resource collections to different user groups in trusted domains. I have one gateway, one connection broker and several session hosts in the resource domain. The problem is that all RDS users from trusted domains for some reason see all collections and apps in RDWeb user portal, completely disregarding the user/group assignments on collections and apps. Althouth, filtering works fine for members of the resource domain.
Any ideas? Regards, Ruslan

Windows Server 2019
Windows Server 2019
A Microsoft server operating system that supports enterprise-level management updated to data storage.
3,451 questions
Remote Desktop
Remote Desktop
A Microsoft app that connects remotely to computers and to virtual apps and desktops.
4,234 questions
0 comments No comments
{count} votes

3 answers

Sort by: Most helpful
  1. Karlie Weng 13,951 Reputation points Microsoft Vendor
    2020-12-07T05:52:13.59+00:00

    Hello Ruslan @Ruslan Nalivaika

    Please make sure you have added groups in Active Directory Users and Computers .

    For example, you have Group A and B, each group has their own users.
    Please add Group A and B as member of built-in group named Remote Desktop Users:
    Active Directory Users and Computers – your domain name – Builtin - Remote Desktop Users – Properties – Members – Add, manually add Group A and B.

    On your RD CB, open Server Manager – Remote Desktop Services – Collections:
    Click to select one of your collection, for example Collection 1 – PROPERTIES – TASKS – Edit properties – User Group – manually add Group A, and remove domain user group. Make sure there is only group A added.

    Save the change and check the result. Same operation for your collection 2 and group B.

    ----------

    If the Answer is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    Best Regards
    Karlie

    0 comments No comments

  2. Ruslan Nalivaika 106 Reputation points
    2020-12-07T08:30:08.08+00:00

    Hi Karlie, yes different customers/users are members of different AD groups used on collections...

    0 comments No comments

  3. Ruslan Nalivaika 106 Reputation points
    2020-12-07T09:15:25.747+00:00

    Is there any log that I can use to troubleshoot user assignment filtering ?