up vote 1 down vote favorite
share [g+] share [fb]

I have a group policy setup that turns on remote desktop connections to all clients on the network.

The only problem with this, is the local user accounts are not administrative accounts and do not have access to remote desktop. The only way I can remote in is if I use an administrative account and log them out.

Is there a way to add remote desktop users on the remote machines via group policy, or do I need to manually add them in the remote settings via system on the local machine?

Thanks.

link|improve this question
100% accept rate
1  
You can control local group membership, using Group Policy, via the Restricted Groups option. See this serverfault.com/questions/227188/… -- That question uses the local group "Administrators" in the example, but you may use any local group with Restricted Groups. – jscott Nov 10 '11 at 16:06
@jscott -- So , I would create a new group called Remote Desktop Users, and add the members for accounts that would be able to use remote desktop connections, then make the group a member of remote desktop users? – Jeff Nov 10 '11 at 16:14
Create domain group "DOMAIN\Remote Desktop Users - Workstations" (or what ever designation you want) and add the required domain users to that group. Use Restricted Groups to add that new domain group to the pre-existing local group "Remote Desktop Users". – jscott Nov 10 '11 at 16:18
feedback

1 Answer

up vote 6 down vote accepted

You can use Group Policy Preferences to update the local "Remote Desktop Users" group to contain whatever users you want it to.

The screenshot below shows modifications to the Administrators group, but you can select any built-in group you want, including Remote Desktop Users. GPP Screencap

link|improve this answer
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.