how privilege terminal server policy above other policy?

[RO|_F]

Hello,

In my company we use rdp servers for all users to connect to the production
application.
I configured group policies on rdp servers but also on users and computers,
including laptops. HOwever, when a laptop user logs in to rdp server (in
test environment still fortunately), his user and laptop policy overrides
the policy I've set on the rdp server OU, for example he can shut down the
system while I disallowed this on the rdp server gpo.
How can I force that the rdp server policy has priority over all other
policies (except default domain policy/ default dc policy)?

Thanks for your help

Rolf
Utrecht, Netherlands

 

[Denis Wong @ Hong Kong]

Hi Rolf,

I am confused. If I get you correctly, your "rdp server" policy is computer
policy applying to the OU containing your "rdp server" objects. If your
users log on your server it will apply your "rdp server" policy but not your
users' computer policy.

If your users can shutdown your server then check the user rights assignment
section and see if the Shut down the system is set or not.

For more detail result you can use gpresult or similar tools to check what
is effective in your environment.

br,
Denis