This policy setting specifies whether to disable the administrator rights to customize security permissions for the Remote ...

Windows 10

This policy setting specifies whether to disable the administrator rights to customize security permissions for the Remote Desktop Session Host server.  

You can use this setting to prevent administrators from making changes to the user groups allowed to connect remotely to the  RD Session Host server. By default, administrators are able to make such changes.

If you enable this policy setting the default security descriptors for existing groups on the RD Session Host server cannot be changed. All the security descriptors are read-only.

If you disable or do not configure this policy setting, server administrators have full read/write permissions to the user security descriptors by using the Remote Desktop Session WMI Provider.

Note: The preferred method of managing user access is by adding a user to the Remote Desktop Users group.

This policy setting specifies whether the Windows Registration Wizard connects to Microsoft.com for online registration. ... This policy setting specifies whether to allow printing over HTTP from this client. Printing over HTTP allows a client to ... This policy setting specifies whether to allow this client to download print driver packages over HTTP. To set up HTTP printing, ... This policy setting specifies whether to automatically update root certificates using the Windows Update website. Typically, ... This policy setting specifies whether to disable the administrator rights to customize security permissions for the Remote ... This policy setting specifies whether to display script errors when a page does not appear properly because of problems with ... This policy setting specifies whether to enable or disable tracking of responsiveness events. If you enable this policy setting, ... This policy setting specifies whether to end a Remote Desktop Services session that has timed out instead of disconnecting ... This policy setting specifies whether to prevent the mapping of client drives in a Remote Desktop Services session (drive ...