0
I have a Windows Server 2008 and I want to allow a user group in AD to be able to remotely access a certain computer inside the network (not the server). Is that even possible? Or I can only specify who can access the server itself? I've been searching for hours and every article is about how to access the server.
For example I have two groups: salesman and clerk, and I have two computers: pc1 and pc2. Both groups use both computers, what I want to do is to give "salesman" right to remote desktop from pc1 to pc2.
- Update - I'm not trying to remotely access my computer through the internet, only from inside my local network.
"Is that even possible?" - Yes; It is possible; – Ramhound – 2016-11-16T18:35:06.857
And can you tell me how? – roberto – 2016-11-16T18:39:40.480
I know nothing about your Windows Server 2008 configuration. You would have to assign each computer its own public ip address, or connect to each computer on a different port, and forward all traffic on that port to that computer. Might be easier to use third-party software designed to make this easy. I have no recomendations for those services, but they are well documented, I suggest one of those instead. – Ramhound – 2016-11-16T18:48:52.213
The first question to address is, how is AD going to know which computer belongs to the user? It won't, unless you have some sort of custom field in the user or computer account. Usually this is a manual process of adding users to the Remote Desktop Users local group on the computer in question. – GuitarPicker – 2016-11-16T19:56:49.737
Sorry for not being clear! I edited my question. – roberto – 2016-11-16T20:11:58.313