We have some domain admins on the Windows domain. We want to restrict some of them from accessing certain servers via RDP (mstsc.exe). But we still want them to be domain admins.
So in the end, some domain admins can access all servers, some only certain servers, while still being domain admins. Is there a way?