In Remote Desktop Services, How to fix RDS properties greyed out "Add User or Group" button?

Question

Hi Experts,

When I try to use remote desktop connection app to remotely access our AD server, I encounter a problem using the admin credential. It says that:

"To sign in remotely, you need the right to sign in through Remote Desktop Services. By default, members of the Administrator group have this right. If the group you're in doesn't have this right, or if the right has been removed from the Administrator's group, you need to be granted this right manually."

When I go to Local Group Policy Editor, and I go to Remote Desktop Services properties, I try to add user or group, but the button is greyed out/unclickable.

Local Group policy > Computer Configuration > Windows Settings> > Security Settings > Local Policies > User Right > Allow log on through RDS properties.

Please guide me with this. It will be a great help for our end. Thank you.

Answer 1

Hello JADEngracia27,

Thank you for posting in Microsoft Community forum.

What account do you want to access your AD server?

You can try the following actions on one Domain Controller to see if it helps.

1.Add this account as one member to Remote Desktop Users group.

2.Open gpmc.msc on DC and edit the Default Domain Policy object and navigate to Computer Configuration\Policies\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Allow logon through Remote Desktop Services, this user or the group with this user should be in the list.

I hope the information above is helpful.

If you have any question or concern, please feel free to let us know.

Best Regards,
Daisy Zhou

Answer 2

Hello JADEngracia27,

Good day!

1.On the machine you want to logon remotely, open local users and groups, check if this account that want to logon this machine remotely is one member to Remote Desktop Users group.

2.Also, on the machine you want to logon remotely, please check if this domain user account is actually added to Computer Configuration\Policies\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Allow logon through Remote Desktop Services via exporting gpresult.

For checking Computer Configuration within gpresult, we can follow steps below.

Logon this machine using administrator account.

Open CMD (run as Administrator).

Type gpresult /h C:\gpo.html and click Enter.

Open gpo.html and check gpo setting under "Computer Details".

3.Also, please ensure this domain user account is not in the list of Deny logon through Remote Desktop Services (Computer Configuration\Policies\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Allow logon through Remote Desktop Services).

Best Regards,
Daisy Zhou

Answer 3

Hello JADEngracia27,

Good day!

Yes, it may be. You can add the user via Group Policy Management Editor, and then check the option in your screenshot using Administrator account (a local user or normal domain user may have no permission, then it may be greyed out here).

Best Regards,
Daisy Zhou

Answer 4

Hi Daisy Zhou,

Thank you very much for this. We're going to try this on our side.

On our previous activity, we try to navigate this in Local Security Policy Editor, but we see that the Add User or Group Button is greyed out so we can't add a user to the list (kindly see the image below). So, is there a possibility that this can also happen on Group Policy Management Editor?

Again, thanks for this.

Best Regards,

Joshua Engracia

Answer 5

Hi Daisy Zhou,

Good Day!

I already added the user with administrator rights to the Group Policy Management Editor, but still, I got stuck in here, when I tried to Remote Access it:

Do you have any solution to this issue?

Thank you very much.

Best Regards,

Joshua Engracia