My computer is on a domain. I wanted to enable RDP access so I could work remotely, however in doing that, I’m letting my colleagues and others in my organization log in to my PC, as well as potentially allowing an intruder to log in.

There are options to disallow logins from specific groups, however I can not block those domain groups because I am part of them. The easier approach for me is to be selective with who is allowed as opposed to defining explicit blocks.

 

To allow logins for only yourself through RDP

open gpedit.msc on your machine.

 

Drill down to:

Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> User Rights Assignment

 

Highlight "Allow log on through Remote Desktop Services" and open it’s properties.

 

 

By default, “Remote Desktop Users” and “Administrators” are allowed RDP login.

 

First, add your account.

 

Then remove “Administrators” and “Remote Desktop Users:

 

That’s it! Now no one besides your account will be able to RDP into your PC.

 

 

Enjoy peace of mind.


Leave a Reply

Related Posts

File Services

How to Enable Shadow Copies for a volume in Windows Server 2012 R2

Enable Shadow Copies (Enable Previous Versions) Click Start , point to Administrative Tools , and then click Computer Management .   In the console tree, right-click Shared Folders , click All Tasks , and then click Configure Shadow Copies .   The window that opens will look Read more…

Linux Server

Easy SSL for ScreenConnect with NGINX Reverse Proxy

On the topic of NGINX Reverse Proxy, it just so happens that the process for installing an SSL certificate onto your ScreenConnect server can be rather difficult, and a much more flexible approach is by Read more…

File Services

How to use Robocopy to Preseed Files for DFS Replication

Use Robocopy to Preseed Files for DFS Replication I’ll write this here first, since it’s important: The folder in which you are robo-copying (ex c:\test) must not exist on the destination server (ex. f:\test). If you create Read more…

%d bloggers like this: