Remote Desktop Users and Least User Rights

[Guest Thomas M]

We have undertaken a project to switch all of our users to standard user

accounts (no administrative rights on the local machine). We have many

users that are setup so that they can access their computers from home.

We've noticed that when the user is removed from the Administrators

group, the list of authorized remote users (My Computer > Properties >

Remote tab > Select Remote Users) gets wiped out. An administrator then

has to log on to the machine and add the user back to the list.

 

I can see why this would happen, but it does present something of a

problem for us. I would prefer not to have to fix this problem on

hundreds of machines. Is there a way that we can retain the list of

authorized remote users when we remove the employees administrative

rights on the machine? Also, is there some way--perhaps a script--that

we can identify the machines were remote users have been setup?

 

--Tom