Forum Discussion

Jasmer1's avatar
Jasmer1
Copper Contributor
Jul 09, 2019

Does adding user to Hostpool name gives access to local admin group of a VDI ? Like OnPrem RDS does?

Does adding user to Hostpool  (using, cmdlet, Add-RdsAppGroupUser ) gives access to local admin group of a VDI ? Like OnPrem RDS does while a VDI is assigned to a user, does this WVD also adds the assigned user to local admin group of that VDI?

 

  • michawets's avatar
    michawets
    Iron Contributor
    Jul 12, 2019

    Hi Jasmer1 ,

     

    In a Pooled deployment, adding a user to an AppGroup does not grant a user Local Admin permissions on the Sessionhost, as the sessionhost can have multiple AppGroups (FullDesktop and/or RemoteApp).

     

    I don't know if this is the same in a Personal deployment tbh. 

    • Jasmer1's avatar
      Jasmer1
      Copper Contributor
      Aug 02, 2019

      I'm here referring to personal/persistent VDI assignment and what does assignment actually mean at VDI level does it provide access to local admin group for RDP access and all?

  • corner255's avatar
    corner255
    Copper Contributor
    Aug 05, 2019

    I am testing a personal/persistent Hostpool.

     

    After running Add-RdsAppGroupUser, the hostpool was displayed on user's Windows/HTML Client.

    This user can use VM, but did not belong to local administrators group.

     

    To make the user belong to local administrators group, some another administrator(or domain administrator user) had to launch 'compmgmt.msc -> connect to another computer' to edit the group.

Resources