Remote Desktop Services sign-in issue -Need help with granting the right to sign in remotely

Question

I'm currently encountering a problem with setting up Remote Desktop Services to allow users to sign in remotely. Specifically, I'm uncertain about the steps needed to grant the necessary permissions and ensure everything is configured correctly.

Here are the details of my current setup:

After enrolling my Intune device in Hyper-V on an Azure VM, I received the following error message:

Operating System: Windows 10 & Windows Server 2019

User Role: Standard user

Error Message: "To sign in remotely, you need the right to sign in through Remote Desktop Services. By default, members of the Remote Desktop Users group have this right. If the group you're in doesn't have this right, or if the right has been removed from the Remote Desktop Users group, you need to be granted this right manually."

1. Steps Already Taken: I configured the Group Policy Object (GPO) and enabled "Allow log on through Remote Desktop Services," but the error persists.

Could someone please provide a step-by-step guide or any useful tips to resolve this issue? Your assistance would be greatly appreciated.

Thank you in advance for your help!

Answer 1

Hello,

When dealing with a domain environment, it's crucial to verify that the group policy you've configured to grant Remote Desktop permissions is indeed linked to the correct Organizational Unit (OU) and that it's being properly applied on both the server and the client machines. Additionally, it's important to ensure that the local group policy settings, specifically under Local Policies > User Rights Assignment, are correctly set on the server.

It seems unclear whether additional configurations are required on the Intune side. For reference, you might find these threads insightful:

Enable RDP via Intune - Microsoft Q&A

RDP Not Enabled on Windows 11 INTUNE JOINED PC - Microsoft Q&A

Cannot RDP to Windows 11 PC or VM after InTune enrollment - Microsoft Q&A

However, for on-premises servers or virtual machines, the process is typically straightforward. As the error message suggests, simply adding the intended users to the "Remote Desktop Users" group on the server, either through lusrmgr.msc or through the graphical interface.

---

If the Answer is helpful, please click Accept Answer and upvote it.