RDP
Hi, can someone help me please. I have a used laptop at my work place and the laptop is on the companies domain. The laptop is at a remote location. If a remote user plugs it into a network and powers it on. Then without them doing anything can I as an IT admin access the machine via RDP and then get the machine configured and ready for another user to use?
If so can you please assist me on how this is possible.
@Afzol-Miah Great question, to access the machine via RDP:
1 - Enable RDP on the laptop you want to remotely access
In the search feature (Windows 10) type *Control Panel*
Click *System and Security* > *System* > *Advanced system settings* > *Remote* tab
In the *Remote Desktop* > Choose *Allow remote connections to this computer*
You will either have to be a local admin on the laptop, in the "Select Users" list or a domain administrator with the laptop joined to the domain(which you stated).
2 - On the administrator machine open the Remote Desktop
In the Search on the Taskbar (Windows 10 ) type mstc.exe or Remote Desktop and click the Icon.
Type the name of computer or IP address in the *Computer* field.
If you have trouble connecting insure that the first step is true and that there is not a firewall blocking any connection.
Here is documentation to help: https://docs.microsoft.com/en-us/windows-server/remote/remote-desktop-services/clients/remote-desktop-allow-access
If the machine is joined to the domain, and is connected to the domain network, then you can enable RDP via group policy, if you don't have physical access to the laptop.
Computer Configuration > Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Connections. > Allow users to connect remotely by using Remote Desktop Services
Enable this setting, and then have the user reboot the laptop, or refresh group policy. By default, the local admin will be able to RDP into the machine. You could also use GPO restricted groups to add a user to the Remote Desktop Users group on the laptop.
There are other ways, like group policy preferences, PowerShell script, Intune, but for domain machines, GPO is probably the easiest way without physical access to the laptop.
Thank you both for your kind response. I will try these out. Really appreciate it. :)
