How to apply 'Computer 'Configuration' group policy to a set of users.

Zuuber 185 Reputation points
2024-12-06T21:40:22.8466667+00:00

Hi

How to apply computer configuration group policy setting to a set of users when they connect to RDS session hosts?
I'm trying to stop local client drives being redirected once connected to RDS session host servers, but to apply only to a group of users.

Computer Configuration > Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Device and Resource Redirection > "Do not allow drive redirection."

I have tried all sorts of combinations, but i have a feeling this can only applied to the computer itself which would affect all users on the RDS session host, I dont want that, i only want to apply to certain users.

Is this possible? thanks.

Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
13,467 questions
Windows Server Management
Windows Server Management
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Management: The act or process of organizing, handling, directing or controlling something.
444 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Marti Peig 610 Reputation points Microsoft Employee
    2024-12-06T22:20:36.7+00:00

    Hi Zuuber,

    You may need to include Loopback processing in your GPO. This policy directs the system to apply the set of GPOs for the computer to any user who logs on to a computer affected by this policy. Check Loopback processing of Group Policy.

    Basically, you need to create your GPO with the Computer Configuration policies in it, including the Configure user Group Policy loopback processing mode under Computer Configuration / Administrative Templates / System / Group Policy.

    If you just need to apply it to a particular set of users, you can use Security group filtering. Check Assign Security Group Filters to the GPO

    I hope it helps.


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.