I create a user and add it to group Remote Desktop Users but I cannot still remote using mstsc. The error message said the user/group doesn't have the right to remote.

My question is how can I grant this right to the group?



Check in the group policy editor (gpedit.msc) under Computer Config > Windows Settings > Security Settings > Local Policies > User Rights Assignment. Find the entry for "Allow log on through remote desktop services" and "deny log on through remote desktop services", and see if the groups in question are in either of those categories. Deny permissions will usually override allow permissions.


On the Desktop

Right click Computer > Properties > Remote > Select User > Add > Advance > Find Now >

Select any user and click Ok.


Go to Active directory
1. Go to your domain name
2. Click on user name and go to its property
3. Set its property and give its policy
4. Remove EVERYONE policy and click to ADD and add your username give your created policy to that user


Add the user to the "Remote desktop users" user group.

Open the Settings app, and go to System -> Remote Desktop -> User accounts -> Select users that can remotely access this PC.

  • Add who to what?  How? ? – Scott yesterday

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.