up vote 1 down vote favorite
share [g+] share [fb]

I'm administrating a network of XP SP2 machines, and I would like to enable remote desktop for every one of them. How can I get this done using a GPO?

Thanks.

link|improve this question
75% accept rate
feedback

2 Answers

up vote 5 down vote accepted

The setting for this in Group Policy is in:

Computer Configuration -> Administrative Templates -> Windows Components ->
Terminal Services -> Allows users to connect remotely using Terminal Services

Set to enable to allow terminal services (RDP) connections, disable to disallow.

This assumes that you are using an account to RDP to these machines that is allowed RDP access, such as a member of the administrators group.

link|improve this answer
For some reason this did not help..., Should this GPO check the box in the System -> Remote Tab -> Allow remote connections? How can I check if there is a script with higher priority already in my active directory? Thanks a lot. – Haim Bender Oct 27 '09 at 10:32
1  
Yeah, it should check that box. You can use the resultant set of policy tool to see what policy's are actually being applied - technet.microsoft.com/en-us/library/cc758010%28WS.10%29.aspx – Sam♦ Oct 27 '09 at 11:12
Also keep in mind firewall settings on the clients. Either windows firewall or a 3rd party. If you are having trouble connecting once RDP is enabled, you may need to add exceptions or disable them. – ManiacZX Oct 27 '09 at 15:51
You can use gpupdate to enforce the script on a specific machine. – Haim Bender Oct 29 '09 at 8:04
feedback
up vote 0 down vote

There should be a VB Script out there That you can run In your GPO->User Configuration->Windows Settings->Scripts(Logon/Logoff). as a Logon script, to enable RDC. Then you would be able to Log in as a Domain admin or with the username that is Running on that Machine.

You are maybe gonna search for a while for such a script and changing it to your needs, but it is worth the trouble. you can use Vb script for almost anything you can click on, it is just a matter of getting the correct script.

link|improve this answer
Running a logon script may allow you to enable RDP, but there is nothing to stop the user from disabling it again should they wish. Your better of using GP to set it, so the user cannot override it. – Sam♦ Oct 27 '09 at 16:11
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.