Frederik Eide

@greengorilla832924

Bergsmo, Norway Joined Jan 2026

Only @greengorilla832924 can see everyone listening in. Visitors see a rotating sample.

Frederik Eide echoed

Frederik Eide

@greengorilla832924 · Jan 12, 2026

Gaby Gabriels

@yellowzebra904790 · Jan 12, 2026 12:15 pm

Allowing RDP access by AD account with limited system access?

We have a policy against "shared" Active Directory accounts to maintain the ability to audit access to individuals. However there are situations that require exceptions, mainly for Labs with instrumentation that is managed by multiple people over longer periods.
In these cases, we create AD "shared" accounts and "lock" them to particular computers by specifying those computers in the "log into" list. This works great for the most part.
However, the lab managers would like to be able to remotely monitor these systems during extended sampling analyses. We can grant the "shared" account RDP rights BUT NLA (Network Level Authentication) won't allow the account to remote login unless it has login rights to \*both\* the remote system \*and\* the local system the user is trying to remote \*from\*. I'd rather not allow the "shared" account rights to login to any system except the instrumentation computers. But NLA is forcing me to allow login to the remote computer as well, apparently.
Has anyone else run across this issue? How did you resolve it?

29 likes 113 responses

Frederik Eide echoed

Frederik Eide

@greengorilla832924 · Jan 11, 2026

Clóvis Farias

@blueduck664816 · Jan 11, 2026 4:56 pm

Have you ever had a dream that affected you in real life?

I fell in love in a dream a week ago. I sobbed for a day. It was a girl. She had red hair and was absolutely amazing.
It really did fuck me up, but it helped me be more aware when I’m dreaming 😭

112 likes 320 responses