I have a Windows server 2022 active directory setup , one user is planning to work remotely, how can I allow him to access the domain joined system remotely?

Question

I tried to add the user to remote desktop user but I am not sure what is the correct way and if it is even possible or not?

Answer 1

Hi Monika Bisht,

Thank you for posting in the Microsoft Community Forums.

1. Configure Remote Desktop Service

Step 1: Enable Remote Desktop Services

On Windows Server 2022, open Server Manager.

Click the Tools menu and select Remote Desktop Services.

In the Remote Desktop Services console, check whether the Remote Desktop Session Host (RD Session Host) role is installed. If it is not installed, follow the wizard to add the role.

Step 2: Configure Remote Desktop Session Hosts

In the Remote Desktop Services console, expand Deployment Overview or Collections, locate and right-click on your server.

Select Properties or Edit Settings and make sure the Allow remote connections to this computer option is enabled.

Configure user access rights by adding specific users or groups to the Remote Desktop Users group.

2. Ensure network connectivity and security

Step 1: Check Network Connectivity

Ensure that remote users can access the Windows Server 2022 over a network, such as a VPN.

Check the network firewall settings to ensure that the port for the Remote Desktop Protocol (TCP 3389) is open.

Step 2: Configure a VPN (if required)

If remote users need to access via VPN, ensure that the VPN server is properly configured and available.

Remote users will need to install and configure the VPN client to be able to securely connect to the corporate network.

Step 3: Enhance Security

Consider using strong password policies and multi-factor authentication to enhance the security of remote access.

Ensure that both Windows Server 2022 and the remote client have the latest security updates and patches installed.

3. Set appropriate user privileges

Step 1: Create or assign user accounts

Create or select a user account in Active Directory that will be used for remote access.

Ensure that the account has been added to the Remote Desktop Users group to be able to log on to the server remotely.

Step 2: Configure Group Policy (optional)

If desired, you can use group policies to further restrict or enhance the security of remote access.

For example, you can configure a group policy to restrict which users can remotely log on to the server from which IP addresses.

4. Testing Remote Access

Remote users should attempt to connect to the Windows Server 2022 through the Remote Desktop Client using their assigned account and password.

If any problems are encountered (e.g. connection failure, insufficient privileges, etc.), check that the above steps have been configured correctly and review the relevant log files for more information.

Best regards

Neuvi