Difficulty creating a normal user on a single-forest domain who can remote desktop to a Windows 10 machine

Question

Hi,

I have a small test network set up. There are two Windows 10 machines plus a single Windows Server 2019 Domain Controller. I have joined one of the Windows 10 machines to the domain. The DC is set up with two users I have created.

The first user 'AKAdmin' is in the administrators group and can make a Remote Desktop connection from the non-domain Win10 machine to the domain connected Win10 machine.

The second user 'AKUser' is in the 'Remote Desktop Users' and 'Users' group but cannot make a Remote Desktop connection from the non-domain Win10 machine to the domain connected Win10 machine.

I have created a group and pulled the Win10 domain connected machine in then created a Group Policy Object - Windows settings ->
Security Settings -> Local policies -> User Rights Assignment > Allow log on through terminal services and added the Remote Desktop Users group in the GPO settings. I have then linked that GPO to the Group with the domain connected Win10 machine in.

However, when I try to log into the domain connected Win10 machine using the AKUser account I get asked ot log in (enter username and password) but then cannot connect with the error - 'The connection was denied because the user account is not authorized for remote login'

I'm confused! Please help :-) !

TC

Answer 1

Hi,

It seems your setting is complicated. You do not need to create a group or GPO for the remote desktop users.

You can just put the user "AKuser" into the local remote desktop users group of the domain-joined windows 10 machine.

Edit local users and groups > Groups > Remote Desktop Users

Please try and see if it works.

Best Regards,

----------

If the answer is helpful, please click "Accept Answer" to help other community members find the helpful reply quickly. Thanks.