Domain User Remote Desktop Access

When domain user is a member of remote desktop users group and as pointed in the above link added to the scurity policy allow log on locally he cannot log through remote desktop to the server that runs the domain controller.

Domain user remote desktop access. Open this in the workstation where you want to connect control panel system and security system click advance system settings. By default you should have the default domain controllers policy. Before reading this tutorial you need to install the windows server essentials experience role. On the remote tab on the remote desktop group click the button select users.

On the clients local security policy allow log on through remote desktop services is applied to administrators and remote desktop users which i believe is the default for any domain client. Net localgroup remote desktop users add corp it pro. If you are using ad make sure you can ping the domain. To add remote desktop users in windows 7 10.

Domain admins are able to login via remote desktop just fine. Net localgroup remote desktop users as you can see it is empty. Click system and security link in the control panel. The manual configuration of the needed permissions may be tricky but thanks to the windows server essentials experience role we have an easier way to allow the remote control.

Select allow connections only from computers running remote desktop with network level authentication more secure under remote desktop. A standard user of an active directory domain may need to access several pcs of the domain. Choose allow remote access link under system. Display the members of the domain group remote desktop users on the domain controller using the command.

Click add and add the user that you want to have access. You need to add the new group to the allow log on through remote desktop services user right under. Click the start menu control panel. Add a domain user it pro to it in our example it pro is a regular domain user without administrative privileges.