"IainM" <IainM@newsgroups.nospam> wrote in message
news:E78DA90B-0B8B-4F70-8723-F60509134C5B@microsoft.com...
>I would like to write a script to add Active Directory groups to allow
>users
> to Remote Desktop to servers. It is the script equivalent of running
> Terminal
> Services Configuration > Connections > right click RDP-tcp > Properties >
> Permissions and adding a group with User Access.
>
> Can anyone me out with code or a pointer to code. I couldn't see code
> that wold do this in the Script Repository on the Microsoft web site.
> There
> was a lot of code for TS tasks, but not this one.

No doubt Richard Mueller will supply the actual script, however, the
equivalent to what you describe above would be to add members to the
security group called "Remote Desktop Users" local to the servers
themselves. If the same set of users are to be allowed remote access to all
the servers, it would probably be more manageable to create a domain-wide
"RDU" group that would be added to the local groups. Even if the servers
will have different remote users, I'd recommend a separate AD group for each
server or group of servers; that way you will never have to modify any of
the local groups again.

/Al

So it's that simple. I have the code for adding a domain group to a local
group as I've done that before, sot hat's me sorted!

Thanks for your .
Iain

"Al Dunbar" wrote:

>
> "IainM" <IainM@newsgroups.nospam> wrote in message
> news:E78DA90B-0B8B-4F70-8723-F60509134C5B@microsoft.com...
> >I would like to write a script to add Active Directory groups to allow
> >users
> > to Remote Desktop to servers. It is the script equivalent of running
> > Terminal
> > Services Configuration > Connections > right click RDP-tcp > Properties >
> > Permissions and adding a group with User Access.
> >
> > Can anyone me out with code or a pointer to code. I couldn't see code
> > that wold do this in the Script Repository on the Microsoft web site.
> > There
> > was a lot of code for TS tasks, but not this one.
>
> No doubt Richard Mueller will supply the actual script, however, the
> equivalent to what you describe above would be to add members to the
> security group called "Remote Desktop Users" local to the servers
> themselves. If the same set of users are to be allowed remote access to all
> the servers, it would probably be more manageable to create a domain-wide
> "RDU" group that would be added to the local groups. Even if the servers
> will have different remote users, I'd recommend a separate AD group for each
> server or group of servers; that way you will never have to modify any of
> the local groups again.
>
> /Al
>
>
>