I want to create AD User in the domain give specific permission to the user something like ,Grant permission in Active Directory to add users / modify / changed password / add them to group them but not delete them.But the same time that AD user must be RDP User.Is it possible then How ?


Yes, it is. Those are different kind of privileges:

  • Assing the permissions needed using the Delegation of Control Wizard.

  • You could add the user to group Builtin\Remote Desktop Users to give RDP access.

    Members in this group are granted the right to logon remotely

In order to manage Active Directory users this user doesn't necessarily need RDP access to the server. It's also possible to install Remote Server Administration Tools on any workstation.

  • I added user to the Remote Desktop Group & not Succeeded.When I edit local GPO & enable the "Allow log on through Remote Desktop Services" User can log it through RDP.But the user(non admin) has administrator rights. – Amila Kalhara Wagasinghe Apr 17 '18 at 11:22

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.