Restrict RDP to certain IP addresses

[blin]

I have one Windows 2003 Enterprise Terminal Server that once users are logged on to they can then RDP to other servers in my environment. Essentially like a management server. Is it possible for me to use AD groups to be able control which IP addresses these groups can RDP to. So for example:

Users in Group1 can only RDP to 10.1.1.10 - 10.1.1.20

Users in Group2 can only RDP to 10.1.1.21 - 10.1.1.30, 10.1.1.40, 10.1.1.50

[blin]

I suggest you try to configure the following policies on TS server to allow only certain users:

[Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights assignment]

- Allow logon through Terminal Services
- Deny logon through Terminal Services.

Add the users to above policy accordingly.