…Admin user won't use the Administrators' group token unless UAC is disabled for all admins on the RDGW. I am proposing changes to PowerShell Scripts as well as how they are called from CFN template to have RDGWs create a local group too and assign RAP permissions through that group rather than the built-in Administrators group.
Issue #, if available:
Description of changes:
By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.
…Admin user won't use the Administrators' group token unless UAC is disabled for all admins on the RDGW. I am proposing changes to PowerShell Scripts as well as how they are called from CFN template to have RDGWs create a local group too and assign RAP permissions through that group rather than the built-in Administrators group.
Issue #, if available:
Description of changes:
By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.