We have pushed a GP to all of our machines to add <domain>\Domain Users in the Remote Desktop Users list of every corporate machine.

Unfortunately - every once in a while (and I mean 2-3 times per...