windows server 2012 remote desktop administrator access

Let get started and create a GPO with go to the following location. The problem that I have seen during the last 15 years is that many admins give up and end up giving domain admin rights to users. The classic use case for this is giving users access to a remote desktop without needing to give them domain admin permissions. The above two steps are done using group policy without applying doing anything on the target machine. Add the users to the local Remote Desktop Users group on the target machine or machines.Create a GPO that allows the users to RDP (by default only domain admins are allowed).To allow non-domain admin users Remote Desktop Access using Group Policy we need to do the following two things: While looking into this issue, I have seen so many blog post on the internet that give the wrong guide which will lead to the users not being to log in. After you review the information, click Ok.Ĭlick Ok on the Properties window to save the change.įor the best possible security for your administrators, we strongly recommend that you change the passwords frequently to reduce any malicious attempts to access either your devices or services.In this post, I will show you how to allow Active Directory users that are not domain administrators access to Remote Desktop to servers without giving them privileges’ permissions. This action finds, highlights, and underlines the administrators group. In the text box, enter Administrators and click Check names. Switch to the Member of tab and click Add. Right-click on the user you want to add to the local administrators group and click Properties. Select the Users folder to display the list of users. Type in lusrmgr.msc to open the Local User Management window. Open the Start menu and navigate to the run command (or press Windows Key+R). You do not need to assign the Remote Desktop group or role to someone that is an administrator. Note: The administrator role automatically gives you Remote Desktop Protocol (RDP) access to the server. Use the following instructions to add a user to the local administrators group in Microsoft® Windows Server® 2012:

Windows server 2012 remote desktop administrator access