I am trying to setup an Active Directory so that "Domain Users" can via RDP. If I assign the role "Domain Admin" to the user, they can login via RDP no problem but when I follow many tutorials (this one included) it will not work (says user not added to RDservices). To date I have only gotten this to work by assigning "Domain Admin" to the user which is not something I want to do for every AD user...
So my question is what does the Domain Admin (or local admin) have that I need to add to my AD users?
UPDATE: So turns out my issue was that I didnt apply the GPO to "Domain Computers" and rather only to "Domain Users".
Shoutout to @joeqwerty, he knows his stuff and while my issue was more human error, his advice is sound and correct.