Remote Desktop Users group permissions Windows 10

Allow log on through Remote Desktop Services

• Article
• 10/28/2021
• 3 minutes to read
• 7 contributors

Is this page helpful?

Yes No

Any additional feedback?

Feedback will be sent to Microsoft: By pressing the submit button, your feedback will be used to improve Microsoft products and services. Privacy policy.

Submit

Thank you.

In this article

Applies to

• Windows10

Describes the best practices, location, values, policy management, and security considerations for the Allow log on through Remote Desktop Services security policy setting.

Add User to Remote Desktop Users Group in Windows 10

By default, only the administrative users are allowed to remotely connect to your Windows 10 PC through remote desktop connection (RDP). In this tutorial we’ll show you different ways to add non-Administrative user to Remote Desktop Users group in Windows 10 and grant remote desktop access.

Method 1: Add User to Remote Desktop Users Group via Settings App

1. Open the Settings app and go to System -> Remote Desktop. Click on the Select users that can remotely access this PC link on the right side.
   

2. When the Remote Desktop Users dialog opens, click on Add.
   

3. Click on Advanced.
   

4. Click on Find Now and then select any user account you want to add to the “Remote Desktop Users” group, and click OK.
   

5. Click OK and you’re done.
   

Method 2: Add User to Remote Desktop Users Group via lusrmgr.msc

1. Press the Windows key + R to open the Run box, then type lusrmgr.msc and hit Enter.
   

2. Expand Local Users and Groups -> Groups in the left pane, then double-click the “Remote Desktop Users” group in the right pane.
   

3. In the Remote Desktop Users Properties window, click on Add.
   

4. Click on Advanced.
   

5. Click on the Find Now button, then select a user account you want to add as a member of the Remote Desktop Users group and click OK.
   

6. Click OK and you’ve successfully added a non-Administrative user to Remote Desktop Users group.
   

Method 3: Add User to Remote Desktop Users Group via Command Prompt

1. Open up the Command Prompt as administrator.
2. Type the following command and hit Enter. Replace the “UserName” with the actual user account you want to add to Remote Desktop Users group.

   net localgroup "Remote Desktop Users" "UserName" /add

   

   If you need to remove a user from the Remote Desktop Users group, run this command:

   net localgroup "Remote Desktop Users" "UserName" /delete

Method 4: Add User to Remote Desktop Users Group via PowerShell

1. Open up the elevated PowerShell.
2. To grant Remote Desktop access to a user, you can add it to the Remote Desktop Users group by executing this command:

   Add-LocalGroupMember -Group "Remote Desktop Users" -Member "UserName"

   

   When you want to remove a user from Remote Desktop Users, run the following command:

   Remove-LocalGroupMember -Group "Remote Desktop Users" -Member "UserName"

That’s it!

Related posts:

• How to Enable Remote Desktop with Registry, PowerShell or Command Prompt
• Automatically Log off Idle Remote Desktop Sessions in Windows
• How to Enable Remote Desktop in Windows 8 / 10
• Set Up Remote Desktop Connection in Windows 10

• Previous Post: 3 Methods to Suspend or Resume BitLocker Protection in Windows 10
• Next Post: 3 Steps to Change Default Font for Mail App in Windows 10

Posted in Others, Tips & Tricks, Windows 10

Tags: add remote desktop users windows 10 add user to remote desktop users group

Managing Local Users and Groups

Users and groups on Windows servers are managed in a number of different ways, but the most user-friendly way is through the Local Users and Groups interface. There are several ways to open the interface. However, the easiest is to run “lusrmgr.msc”. Lusrmgr.msc can be launched by searching the start menu, command line, or through a run dialog. These methods allow you to find users and groups easily.

To manage local users and groups, you will need to be logged in with a user that has the proper permissions to do so. This is most commonly a user that is already a member of the Administrators group.

Once you open the Local Users and Groups interface, you will see two folders on the left, one for Users, and one for Groups. By selecting Users, you will see a full list of local users on the server. You can also see a variety of related tasks by right-clicking Users, Groups, a user’s name, or a blank area of the middle pane.

There are several ways to add a new user through the Local Users and Groups interface. These methods all result in the same “New User” dialog box opening where you can then configure a Username, Password, and other options. Choose one of the options below to create a new user:

• With the Users folder selected in the left pane, click the Action menu, then select “New User…”.
• With the Users folder selected in the left pane, click “More Actions” from the right- hand pane, then select “New User…”.
• Right-click the Users folder, then select “New User…”.
• With the Users folder selected in the left pane, right-click in a blank area of the middle page, then select “New User…”.

Once you have created a new user, or have identified the usernameof the existing user, you are ready to assign that user to a Group. Users assigned to a group are known as group members.

As with user management, group management can also be performed in several ways. The options below cover several of the most common ways to assign a new member tothe Remote Desktop Users group:

• Select the Users folder from the left pane of the Local Users and Groups interface, open the Users Properties window by double-clicking the user, select the “Member Of” tab, then click “Add…”. Now type “Remote Desktop Users” in the text box and click OK.
• Select the Groups folder from the left pane of the Local Users and Groups interface, double-click the “Remote Desktop Users” group, click “Add…”, enter the user'sname in the text box and click OK.
• Open the system settings by right-clicking the start menu and selecting “System”, choose “Advanced system settings”, select the “Remote” tab, click the “Select Users…” button then click the “Add” button. Now enter the user'sname in the text box and click OK.
• Open the “Server Manager”, select “Local Server” from the left pane, click the blue text next to “Computer Name”, select the “Remote” tab, click the “Select Users…” button then click the “Add” button. Now enter the user'sname in the text box and click OK.

When selecting users or groups, it is recommended to click the “Check Names” button after typing in the user or group name. If the name is underlined after clicking the “Check Names” button, then the name was identified correctly.

You can also use the “Advanced...” button when selecting users or groups instead of typing its name. Clicking the “Advanced...” button followed by the “Find Now” button will result in a list of users to select.

Manage Local Users and Groups

Users and groups on Windows servers are managed in a number of different ways. The most user-friendly way is through the Local Users and Groups interface.

There are several ways to open the interface. The easiest is to run lusrmgr.msc. Lusrmgr.msc can be launched by searching the start menu, command line, or through a run dialog.

These methods allow you to find users and groups easily.

*

User Management

Once you open the Local Users and Groups interface, you will see two folders on the left, one for Users, and one for Groups. By selecting Users, you will see a full list of local users on the server.

You can also see a variety of related tasks by right-clicking Users, Groups, a user’s name, or a blank area of the middle pane.

There are several ways to add a new user through the Local Users and Groups interface. These methods all result in the same New User dialog box opening where you can then configure a Username, Password, and other options.

Choose one of the options below to create a new user:

The first way to create a new user

1. Select the Users folder from the left side of the screen.

2. Click the Action menu.

3. Select New User….

The second method to create a new user

1. Select the user folder from the left

2. Click More Actions from the right-hand pane.

3. Select New User… .

The third method to create a new user

1. Right-click on the Users folder.

2. Select New User….

The fourth method to create a new user

1. Select the users folder from the left side of the screen.

2. Right-click in a blank area of the middle page

3. Select New User….

Once you have created a new user, or have identified the username of the existing user, you are ready to assign that user to a Group.

Note: Users assigned to a group are known as group members.

Group Management

Group management can be done in several ways. The options below cover several of the most common ways to assign a new member to the Remote Desktop Users group:

The first way to Group Management

1.Select the Users folder from the left pane of the Local Users and Groups interface.

2.Open the Users Properties window by double-clicking the user.

3.Select the Member Of tab.

4.Click Add….

5.Type Remote Desktop Users in the text box and click OK.

The second way to Group Management

1.Select the Groups folder from the left pane of the Local Users and Groups interface.

2.Double-click the Remote Desktop Users group.

3.Click Add… .

4.Enter the user’s name in the text box and click OK.

The third way to Group Management

1.Open the system settings by right-clicking the start menu.

2.Select System.

3.Choose Advanced system settings.

4.Select the Remote tab.

5.Click the Select Users… button.

6.Click the Add button.

7.Enter the user’s name in the text box and click OK.

The fourth way to Group Management

1.Open the Server Manager.

2.Select Local Server from the left pane.

3.Click the blue text next to Computer Name.

4.Select the Remote tab.

5.Click the Select Users… button.

6.Click the Add button.

7.Now enter the user’s name in the text box and click OK.

You can also use the “Advanced…” button when selecting users or groups instead of typing its name.

Clicking the “Advanced…” button followed by the Find Now button will result in a list of users to select.

By default, there are no members of the Remote Desktop Users group and only members of the Administrators group are allowed to connect through RDP.

Members added to the Remote Desktop Users group are considered non-Administrative users. These users will be unable to perform most management tasks such as installing software, managing IIS, or rebooting the server.

If a user requires management abilities, the user will need explicit access to that task or will need to be a member of the Administrators.

Test Group Membership

When configuring new user and group memberships, you should always review group membership once complete.

Reviewing group membership is most commonly performed through the Local Users and Groups interface. In addition to verifying membership, we also recommend attempting a remote desktop connection with your newest Remote Desktop Users group member.

Once you have logged in with your newest member of the Remote Desktop Users group, you can further verify that groups are set up correctly by running the command “whoami /groups” from a command line.

The output of this command lists the username and its associated Group names.

Also, see:

How to transfer file using RDP to Windows Server

Learn how to change the default RDP port simply

4 Ways to enable remote desktop in windows 10

How to Set the RDP limit on Windows Server

Tutorial enable RDP on Windows Server 2019

Dear user, we hope you would enjoy thistutorial, you can ask questions about this training in the comments section, or to solve other problems in the field ofEldernode training, refer to theAsk pagesection and raise your problem in it as soon as possible. Make time for other users and experts to answer your questions.

Goodluck.

Alternative ways to add Remote Desktop users in Windows 10

There are two more ways to add or remove Remote Desktop users in Windows 10.

You can use Local Users and Groups snap-in

You can use Local Users and Groups snap-in if your Windows edition comes with this app.

1. Press Win + R shortcut keys on your keyboard and type the following in the run box:lusrmgr.msc
   
   
   This will open the Local Users and Groups app.

2. Click on Groups on the left.
   
   
3. Double-click "Remote Desktop Users" in the list of groups.
   
   
4. Click the Add button to add one or more users.

You are done.

You can the net.exe console tool

1. Open an elevated command prompt.
2. Type the following command:net localgroup "Remote Desktop Users" "UserName" /add

   Replace the "UserName" portion with the actual user account name you want to add to Remote Desktop users.
   In my case, the command looks as follows:

   net localgroup "Remote Desktop Users" "Alice" /add
3. To remove a user from the "Remote Desktop Users", substitute the /add argument in the command above with the /delete switch, as follows:net localgroup "Remote Desktop Users" "Alice" /delete

See the following screenshot.

Articles of interest:

• Remote Desktop (RDP) Keyboard Shortcuts in Windows 10
• Change Remote Desktop (RDP) Port in Windows 10
• Connect To Windows 10 Using Remote Desktop (RDP)

RECOMMENDED: Click here to fix Windows issues and optimize system performance

Support us

Winaero greatly relies on your support. You can help the site keep bringing you interesting and useful content and software by using these options:

If you like this article, please share it using the buttons below. It won't take a lot from you, but it will help us grow. Thanks for your support!

Advertisment

Author: Sergey Tkachenko

Sergey Tkachenko is a software developer from Russia who started Winaero back in 2011. On this blog, Sergey is writing about everything connected to Microsoft, Windows and popular software. Follow him on Telegram, Twitter, and YouTube. View all posts by Sergey Tkachenko