Windows Remote Desktop IP address Control access rights

Windows Remote Desktop IP Address Control access rights

1. Workgroup Environment

In a workgroup environment, because there is no Group Policy service, you only have to open the console and add the Group Policy Object Editor for Group Policy settings.

1) Click "Start"-"Run"-"cmd", enter "MMC", open "console".

2) Click on the "File" menu-"Add / Remove Snap-in" to open the "Add /Remove Snap-in " dialog box.

3) Click the "Add" button and select "Group Policy Object Editor".

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M00/53/8A/wKiom1RqtxOyKEQqAAEEI7pw0HQ139.jpg "title=" 1-1. JPG "alt=" wkiom1rqtxoykeqqaaeei7pw0hq139.jpg "/>

4) Click "Add" button, click "OK" two times to complete the Add.

5) go back to the console and turn on local Computer policy-Computer Configuration-Windows Settings-security settings -IP security policy on local computer. As shown in.

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M00/53/88/wKioL1Rqt9OzJKDiAAC5D2QngQw662.jpg "title=" 2.jpg " alt= "Wkiol1rqt9ozjkdiaac5d2qngqw662.jpg"/>

6) Right-click on the right frame, select "Create IP security Policy", open the "IP Security Policy Wizard", click "Next" to open the "IP Security Policy name" page, as shown in.

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M01/53/8C/wKioL1Rq4juxb-s_AAB-gA_j9Hs865.jpg "title=" 3.jpg " Style= "Float:none;" alt= "wkiol1rq4juxb-s_aab-ga_j9hs865.jpg"/>

7) Click "Next" to open the "Secure Communication Request" page and remove the "Activate Default response rule" check box as shown in.

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M00/53/8E/wKiom1Rq4cXSDnj3AACGFIGsRxE044.jpg "title=" 4.jpg " Style= "Float:none;" alt= "wkiom1rq4cxsdnj3aacgfigsrxe044.jpg"/>

8) Click the "Next" button to open the "completing the IP Security Policy Wizard" page and remove the "Edit attributes" check box as shown in .

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M02/53/8C/wKioL1Rq4ynxZlkhAACbw0NpHpk241.jpg "title=" 5.jpg " Style= "Float:none;" alt= "wkiol1rq4ynxzlkhaacbw0nphpk241.jpg"/>

9) Click "Finish" button.

Right-click on the right frame and select "Manage IP filters and filter Actions" as shown in.

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M02/53/8E/wKiom1Rq4rSTuTQcAADR23y9BjA195.jpg "title=" 6.jpg " Style= "Float:none;" alt= "wkiom1rq4rstutqcaadr23y9bja195.jpg"/>

One) Select the Manage Filter Actions tab and click the Add button to open the filter Actions page.

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M00/53/8C/wKioL1Rq4ynAG40GAAB95Pr5PuI225.jpg "title=" 7.jpg " Style= "Float:none;" alt= "wkiol1rq4ynag40gaab95pr5pui225.jpg"/>

on the Filter Action Name page, enter "Deny" and click the "Next" button. Open the Block radio button in the filter action general then options, as shown in.

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M00/53/8E/wKiom1Rq4rTQGYn0AABtiR94f3Y422.jpg "title=" 8.jpg " Style= "Float:none;" alt= "wkiom1rq4rtqgyn0aabtir94f3y422.jpg"/>

Complete the operation.

Select the Manage IP filter Lists tab.

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M01/53/8C/wKioL1Rq4yqDb3v4AADKduA0mMM699.jpg "title=" 9.jpg " Style= "Float:none;" alt= "wkiol1rq4yqdb3v4aadkdua0mmm699.jpg"/>

Click the Add button to open theIP filter list and enter the "deny" name.

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M01/53/8E/wKiom1Rq4rSAhuJpAACh3nTgIN0928.jpg "title=" 10.jpg "Style=" Float:none; "alt=" wkiom1rq4rsahujpaach3ntgin0928.jpg "/>

Click the Add button, select the Address tab, select any IP address in the Source address list , and select my IP address in the destination address list . As shown in.

650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M02/53/8C/wKioL1Rq4yrSfs4QAACtO Or2 lsa647.jpg "title=" 11.jpg "Style=" Float:none; "alt=" Wkiol1rq4yrsfs4qaacto Or2 lsa647.jpg "/>

() Select the Protocols tab, select TCP in the Select protocol type, select theto this port radio button, and enter "8933" in the text box. As shown in.

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M02/53/8E/wKiom1Rq4rWwsc3YAACcUrv4JkI846.jpg "style=" float: none; "title=" 12.jpg "alt=" Wkiom1rq4rwwsc3yaaccurv4jki846.jpg "/>

Set the success information as shown in.

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M02/53/8E/wKiom1Rq5vWRTLhnAACQEg8EWyk003.jpg "title=" 13.jpg "alt=" Wkiom1rq5vwrtlhnaacqeg8ewyk003.jpg "/>

on the Manage IP filter List tab, click the Add button and enter "allow one IP" in the nameas shown in.

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M00/53/8E/wKiom1Rq5xngeNcwAADD5-gHqH0381.jpg "title=" 14.jpg "alt=" Wkiom1rq5xngencwaadd5-ghqh0381.jpg "/>

Click the Add button to open theIP filter Properties dialog box, select the Address tab, select a specific IP address in the Source address list , and in the IP Address text box, enter the specified IP address, select My IP address in the destination address list . As shown in.

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M01/53/8E/wKiom1Rq5zCxhOAqAAEAK5NlyA0134.jpg "title=" 15.jpg "alt=" Wkiom1rq5zcxhoaqaaeak5nlya0134.jpg "/>

Select the Protocols tab, select TCP in the Select protocol type list,Select the To this port radio button, and enter "8933" in the corresponding text box. As shown in.

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M02/53/8C/wKioL1Rq57ax8GwuAAC9xAUxTUw389.jpg "title=" 16.jpg "alt=" Wkiol1rq57ax8gwuaac9xauxtuw389.jpg "/>

Set the success information as shown in.

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M00/53/8C/wKioL1Rq58zihw6ZAACJy0xaRI8315.jpg "title=" 17.jpg "alt=" Wkiol1rq58zihw6zaacjy0xari8315.jpg "/>

) Double-click8933to openthe 8933 Properties page, as shown in.

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M01/53/8E/wKiom1Rq52aiRavUAADgSxFlEh8636.jpg "title=" 18.jpg "alt=" Wkiom1rq52airavuaadgsxfleh8636.jpg "/>

Remove the Use Add Wizard check box, click the Add button, selectthe IP filter List tab, and select theallowone IP radio button, as shown in.

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M00/53/8C/wKioL1Rq6Cmy5Oa5AADM4blpDYA966.jpg "title=" 19.jpg "alt=" Wkiol1rq6cmy5oa5aadm4blpdya966.jpg "/>

Select the Filter Action tab and select the License radio button, as shown in.

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M01/53/8C/wKioL1Rq6ECC0axJAAEY2FuoS80493.jpg "title=" 20.jpg "alt=" Wkiol1rq6ecc0axjaaey2fuos80493.jpg "/>

Click OK to complete the license authorization.

In the same vein, complete the deny authorization. Such as.

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M02/53/8C/wKioL1Rq6FbAxGzdAAEHm1L3udY782.jpg "title=" 21.jpg "Style=" Float:none; "alt=" wkiol1rq6fbaxgzdaaehm1l3udy782.jpg "/>

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M01/53/8E/wKiom1Rq5-DRIL6TAAEdEhAwMOs882.jpg "style=" float: none; "title=" 22.jpg "alt=" Wkiom1rq5-dril6taaedehawmos882.jpg "/>

Set the completion information as shown in.

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M00/53/8E/wKiom1Rq6ASi6pPpAAD4SsnBbRE952.jpg "title=" 23.jpg "alt=" Wkiom1rq6asi6pppaad4ssnbbre952.jpg "/>

Right-click on "8933" and select "Assign" function to complete the operation.

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M01/53/8C/wKioL1Rq6I3SzzgvAADnh1smEFU455.jpg "title=" 24.jpg "alt=" Wkiol1rq6i3szzgvaadnh1smefu455.jpg "/>

2. domain Environment

First, determine the domain environment Setup is complete.

The procedure is as follows:

1) Open "Start"-"Programs"-"Administrative Tools"-"Domain Security Policy" in the domain manager. As shown in .

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M01/53/8E/wKiom1Rq6C-x769iAADtTq-bo48316.jpg "title=" 25.jpg "alt=" Wkiom1rq6c-x769iaadttq-bo48316.jpg "/>

2) click on "IP Security Policy in activedirectory(domain name)" as shown in.

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M02/53/8E/wKiom1Rq6Dvy2T5dAADTL2hK264737.jpg "title=" 26.jpg "alt=" Wkiom1rq6dvy2t5daadtl2hk264737.jpg "/>

3) Right-click on the right frame, select "Create IP security Policy", and follow the steps with "workgroup environment"6 to step. Complete the setup.

4) usually the Group Policy response time is "$"minutes, double-click "8933", open the Properties page, select the "General" tab, modify "Check policy change interval" to the appropriate time.

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M00/53/8C/wKioL1Rq6Miy1NqhAADH7y4KuMc529.jpg "title=" 27.jpg "alt=" Wkiol1rq6miy1nqhaadh7y4kumc529.jpg "/>

5) If you set multiple IP addresses to access the specified server (all servers within the domain), you can add multiple filter policies in the IP filter list. As shown in.

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M01/53/8C/wKioL1Rq6Nbib--sAAEWBrWGHwY032.jpg "title=" 28.jpg "alt=" Wkiol1rq6nbib--saaewbrwghwy032.jpg "/>

This article is from the "co-learning" blog, so be sure to keep this source http://missingxp.blog.51cto.com/5484693/1579045

Windows Remote Desktop IP address Control access rights