I create a user and add it to group Remote Desktop Users but I cannot still remote using mstsc. The error message said the user/group doesn't have the right to remote.

My question is how can I grant this right to the group?

Thanks!

up vote 37 down vote accepted

Check in the group policy editor (gpedit.msc) under Computer Config > Windows Settings > Security Settings > Local Policies > User Rights Assignment. Find the entry for "Allow log on through remote desktop services" and "deny log on through remote desktop services", and see if the groups in question are in either of those categories. Deny permissions will usually override allow permissions.

On the Desktop

Right click Computer > Properties > Remote > Select User > Add > Advance > Find Now >

Select any user and click Ok.

Go to Active directory
1. Go to your domain name
2. Click on user name and go to its property
3. Set its property and give its policy
4. Remove EVERYONE policy and click to ADD and add your username give your created policy to that user

Your Answer

 

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Not the answer you're looking for? Browse other questions tagged or ask your own question.