Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a group policy setup that turns on remote desktop connections to all clients on the network.

The only problem with this, is the local user accounts are not administrative accounts and do not have access to remote desktop. The only way I can remote in is if I use an administrative account and log them out.

Is there a way to add remote desktop users on the remote machines via group policy, or do I need to manually add them in the remote settings via system on the local machine?


share|improve this question
You can control local group membership, using Group Policy, via the Restricted Groups option. See this… -- That question uses the local group "Administrators" in the example, but you may use any local group with Restricted Groups. – jscott Nov 10 '11 at 16:06
@jscott -- So , I would create a new group called Remote Desktop Users, and add the members for accounts that would be able to use remote desktop connections, then make the group a member of remote desktop users? – Jeff Nov 10 '11 at 16:14
Create domain group "DOMAIN\Remote Desktop Users - Workstations" (or what ever designation you want) and add the required domain users to that group. Use Restricted Groups to add that new domain group to the pre-existing local group "Remote Desktop Users". – jscott Nov 10 '11 at 16:18
up vote 6 down vote accepted

You can use Group Policy Preferences to update the local "Remote Desktop Users" group to contain whatever users you want it to.

The screenshot below shows modifications to the Administrators group, but you can select any built-in group you want, including Remote Desktop Users. GPP Screencap

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.