Allow remote IP by Windows 10 account

Question

Hello.

I have a question about remote desktop access control.

For example, there are 2 accounts and 4 IPs.

account

• Administrator
• USER

IP

• 192.168.1.1
• 192.168.1.2
• 192.168.1.3
• 192.168.1.4

At this time, I would like to set a different IP for remote access for each account, but I am wondering if it is possible.

ex)
Administrator: 192.168.1.1, 192.168.1.2
USER: 192.168.1.1, 192.168.1.2, 192.168.1.3, 192.168.1.4

It is possible to block remote access by account, but is it possible to partially apply it by IP?

PS. This is the same as Linux's ssh access restriction function per ip.

/etc/ssh/sshd_config
allowusers root@192.168.0.0

Answer 1

FYI, only local "Administrators" and "Remote Desktop Users" group users can login via "Remote Desktop". Just use MMC to add the users to the "Remote Desktop Users" group of corresponding workstations.

You can also configure more groups with GPO.

======

Alternatively, you can also set "Log On To" settings on those users with "Active Directory Users and Computers" MMC addin. This will restrict the account to only be able to login the selected computer.