My idea is to restrict users RDP to only to the machine which he was granted.we have redhat cloudforms setup, that provisions windows 7 VM from vmware template, and then joins to the domain. Due to security policy, only machines owner should be granted
RDP access to the machine.
My idea is if i can script this task, I can invoke from ansible. Is there a way to do it in powershell(without winrm) or any activedirectory modules ie. manage computer object(scripted format)?