windows server 2012 remote desktop user not allowed

“Allow Logon through Terminal Services” group policy and “Remote Desktop Users” group In other word, we need add the user to remote desktop users group and delegate with allow logon through remote desktop service.įor more information, please refer to the article below. To allow domain users logon remotely domain member, we need delegate domain users with remote logon and logon right. I suggest you configure GPO with Administrator and those specific users for the setting allow logon through remote desktop services. >The error may occur when user is part of the Remote Desktop users group but that group is not present in the GPO for “Allow Logon through Terminal Services”. What I should configure to allow RDP for all users without adding them to the local Remote Desktop Users If I add them the local Remote Desktop Service of every machine in the domain, the access will be granted. 'The connection was denied because the user account is not authorized for remote login' However users are still not able to connect and they are getting the following error: Is enabled for Administrator and Remote Desktop Users group. Remote desktop has been enabled on the all other servers in the same domain, and 'Allow log on through Remote Desktop Services ' If you have feedback for TechNet Subscriber Support, Tarek, Please remember to mark the replies as answers if they help and unmark them if they provide no help. If the computer is a domain controller, you need add the user to local remote desktop users group and give the user logon through remote desktop service in GPO. >As mentioned above, to allow those users could logon the computers remotely, if the computer is domain member, you just need the user to the local Remote Desktop Users group like Services GPO of the remote server (this setting is by Default). If I add user to the group, I cannot see the user in local Remote Desktop Users group.Īs I mentioned the users are members of Remote Desktop Users builtin domain group, and the this group is already added to all log on thought Remote Desktop For my understanding adding a user or group to builtin Remote Desktop Users group in Active Directory will give him access to all servers in the domain withoutĪdding this group again to the local Remote Desktop Users of every server.

Windows server 2012 remote desktop user not allowed