2

For my users in Active Directory, I did setup a GPO in order to allow the remote desktop connections.

For a specific user in particular, I did also manually setup the group membership for Remote Desktop Users:

enter image description here

However, I still get an error while performing a remote logon, saying that the user is not allowed to login in remotely.

Do you have any clue about it? Please just consider that Admins can correctly perform this operation, and the target machine is a generic windows server machine (no specific role yet installed, just joined to the domain).

5

For my users in Active Directory, I did setup a GPO in order to allow the remote desktop connections.

What specifically did you configure in the GPO?

For a specific user in particular, I did also manually setup the group membership for Remote Desktop Users.

Did you add this user to the domain Remote Desktop Users group in Active Directory Users and Computers or did you add them to the local Remote Desktop Users on the server itself? You need to add them to the local Remote Desktop Users group on the server itself.

  • I added the user to the Remote Desktop User group directly in Active Directory Users and Computers. About the GPO, I did follow this guide: thesysadminchannel.com/… – SubZeno May 19 at 14:19
  • 1
    The GPO setting is correct but the user must also be a member of the local Remote Desktop Users group on the server itself. Add the user to the local Remote Desktop Users group. – joeqwerty May 19 at 14:23
  • Is there no programmatic way to do it? I am looking for is a mean to automatically grant this privilege to all users in a given OU for all computers belonging to a particular group. – SubZeno May 19 at 14:35
  • 1
    Sure. You could use Group Policy Preferences to populate the local Remote Desktop Users group on the servers. – joeqwerty May 19 at 14:37
  • 1
    Yes, he could add the domain group to the local group. The point is that the user needs to be a member of the local group, either directly or as a member of another group which is a member of the local group. RDP access requires two things: User Rights and Permissions. User rights can be granted locally or via domain based GPO. Permissions can only be granted locally by making the user a member of the local group. – joeqwerty May 20 at 3:42

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.