Difficulty creating a normal user on a single-forest domain who can remote desktop to a Windows 10 machine

Tim C (ICS Security) 66 Reputation points
2022-09-06T17:44:55.887+00:00

Hi,

I have a small test network set up. There are two Windows 10 machines plus a single Windows Server 2019 Domain Controller. I have joined one of the Windows 10 machines to the domain. The DC is set up with two users I have created.

The first user 'AKAdmin' is in the administrators group and can make a Remote Desktop connection from the non-domain Win10 machine to the domain connected Win10 machine.

The second user 'AKUser' is in the 'Remote Desktop Users' and 'Users' group but cannot make a Remote Desktop connection from the non-domain Win10 machine to the domain connected Win10 machine.

I have created a group and pulled the Win10 domain connected machine in then created a Group Policy Object - Windows settings ->
Security Settings -> Local policies -> User Rights Assignment > Allow log on through terminal services and added the Remote Desktop Users group in the GPO settings. I have then linked that GPO to the Group with the domain connected Win10 machine in.

However, when I try to log into the domain connected Win10 machine using the AKUser account I get asked ot log in (enter username and password) but then cannot connect with the error - 'The connection was denied because the user account is not authorized for remote login'

I'm confused! Please help :-) !

TC

Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
5,799 questions
0 comments No comments
{count} votes

Accepted answer
  1. Eleven Yu (Shanghai Wicresoft Co,.Ltd.) 10,671 Reputation points Microsoft Vendor
    2022-09-08T03:05:23.663+00:00

    Hi,

    It seems your setting is complicated. You do not need to create a group or GPO for the remote desktop users.

    You can just put the user "AKuser" into the local remote desktop users group of the domain-joined windows 10 machine.

    Edit local users and groups > Groups > Remote Desktop Users

    Please try and see if it works.

    Best Regards,

    ----------

    If the answer is helpful, please click "Accept Answer" to help other community members find the helpful reply quickly. Thanks.


0 additional answers

Sort by: Most helpful