Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

For example, the settings to allow userA, but disallow userB on RDP?

share|improve this question
For what? The server's RDP settings or the MSTSC's settings for the client? – Vick Vega Jul 9 '12 at 20:33
I store myself in c:\config.sys - – Andrew Smith Jul 9 '12 at 20:39
the server's RDP settings, see updated question. – user101579 Jul 9 '12 at 22:02
@AndrewSmith Not sure if troll. – jscott Jul 10 '12 at 1:40

The ability to login to a Windows Computer via is a bit spread out.

  • The settings for the RDP listener process can be found in this MMC.
    • Administrative Tools\Terminal Services\Remote Desktop Session Host Configuration
  • Open the RDP-Tcp connection, and click the Security tab.

By default there will be settings to permit anyone in the local\Administrators, and local\Remote Desktop Users groups. The standard practice is to simply add the users, or groups you want to have access to one of these groups. Though if you have some unusual requirements you can go into the security properties for the RDP listener, and setup permissions there.

Another method you can use to modify the membership of the Remote Desktop Users group by right clicking on My computer, going into the properties, and clicking the Remote Settings tab. The Select Users dialog is just controlling the membership of the Remote Desktop Users group.

share|improve this answer
Are those settings stored in a specific file? (for example a XML file) – user101579 Jul 10 '12 at 11:00
Like frederik said it is in the registry. – Zoredache Jul 10 '12 at 15:24

They are most likely stored in the registry database, along with almost all the other windows settings.

share|improve this answer
After your edit, i know those settings are set in the GUI of for example server manager, and I am pretty sure those values are stored in the registry too. – Frederik Nielsen Jul 9 '12 at 22:03
After some search, I havent been able to find the place. However, you can run this command to enable a rdp user: NET LOCALGROUP "Remote Desktop Users" <DOMAIN>\<User> /ADD – Frederik Nielsen Jul 9 '12 at 22:11

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.