Configure Users for Remote Desktop Connection

1. In the Server Manager, click Add Roles and select Remote Desktop
Services Role.
2. Select only the following services:
 Remote Desktop Session Host - Users can connect to an RD
Session Host server to run programs, to save files, and to use
network resources on that server.
 Remote Desktop Connection Broker - This prevents a user with a
disconnected session from being connected to a different RD Session
Host server.
 Remote Desktop Licensing - manages the Remote Desktop
Services client access licenses (RDS CALs) that are required for each
device or user to connect to a Remote Desktop Session Host (RD
Session Host) server.

3. For level authentication, select Require Network Level of Authentication.

4. Leave other settings by default. Just click Next to continue the
installation.

By default, only Administrators group are allowed to access the server

remotely. Local security policy for terminal services should be configured to
allow users or groups to logon using remote desktop services.
 To allow users for remote desktop services, we will add Remote Desktop Users
Group in the list of allowed groups for remote connection.

1. Go to Start > Run. Type: secpol.msc. This will open a Local Security
Policy window.

2. In the Local Policy Window, navigate to Local Policies > User Rights
Assignment and double-click “Allow log on…Services “.

3. On the new Allow log on through Remote Desktop Services Properties

window, click Add User or Group button.
4. Enter the Remote Desktop Users group.
There you have Remote Desktop Users included in the list. Click OK to close.

Now, let’s configure the any Domain User available to be a member of

Remote Desktop Users.
1. Go to Start > Administrative Tools > Active Directory Users and
Computers.
2. Select any available Domain User.
3. Right click on the selected Domain user and select Properties.
4. Click Member Of tab.
5. Click Add button to add user groups.
6. Type or enter: Remote Desktop Users. Click OK to close.
 7. Done. The selected user is now allowed to logon using remote desktop
services.

To check:

1. Logon to client computer.

2. Go to Start > Run. Enter mstsc. You may also search “Remote Desktop
Connection” in the search bar.

3. Enter the computer name or IP address of the server.

4. On the next window, enter your domain account and password to
connect.
5. Done.