Hi,
I have a domain user with domain admin rights who is unable to shadow Windows 2016 RDP Sessions with "Access Denied" message. He is already added in the local administrators group on RDP Server. If he logs in to the RDP Server using local administrator account, he can shadow.
Any suggestions?