Hi There,
I have build a new server environment for a client of mine, i have build the following servers with the following roles:
DC Server (AD/DNS/DHCP/RD Licencing)
RRAS Server (Connection Broker/Gateway/RD Web Access)
RDS Server (Session Host)
SQL Server (SQL 2014)
They are all virtual machines in HV.
The problem is that the users that login on the RDS can do everything, install/remove software, start computer management, start CMD etc.
So they have admin privileges, but they are not in any admin group! also have i looked for a simple GPO that can block these admin privileges but without luck.
What can this be and how can it be fixed?
Kind Regards,
Mazen Abdelaal