Windows 10: Allow or Prevent Users and Groups to Log on with Remote Desktop

How to: Allow or Prevent Users and Groups to Log on with Remote Desktop

How to Allow or Prevent Users and Groups to Log on with Remote Desktop in Windows 10


You can use the Remote Desktop Connection (mstsc.exe) or connect to and control your Windows 10 PC from a remote device. When you allow remote desktop connections to your PC, you can use another device to connect to your PC and have access to all of your apps, files, and network resources as if you were sitting at your desk.

By default, Remote Desktop Services.

See also: Allow log on through Remote Desktop Services (Windows 10) | Microsoft Docs

This tutorial will show you how to allow or prevent specific users and groups to log on with a Remote Desktop connection in Windows 10.

*note You must be signed in as an administrator to allow or prevent users and groups to log on through Remote Desktop Services.

*Warning The Deny log on through Remote Desktop Services policy will override this Allow log on through Remote Desktop Services policy.


CONTENTS:

• Option One: Allow Users and Groups to Log on with Remote Desktop in Local Security Policy
• Option Two: Prevent Users and Groups to Log on with Remote Desktop in Local Security Policy
• Option Three: Allow or Prevent Users and Groups to Log on with Remote Desktop in Command Prompt

OPTION ONE [/i] Allow Users and Groups to Log on with Remote Desktop in Local Security Policy
*note Local Security Policy is only available in the Windows 10 Pro, Enterprise, and Education editions.

All editions can use Option Three below.
1. Press the Win+R keys to open Run, type secpol.msc into Run, and click/tap on OK to open Local Security Policy.

2. Expand open Local Policies in the left pane of Local Security Policy, click/tap on User Rights Assignment, and double click/tap on the Allow log on through Remote Desktop Services policy in the right pane. (see screenshot below)



3. Click/tap on the Add User or Group button. (see screenshot below)



4. Click/tap on the Advanced button. (see screenshot below)



5. Click/tap on the Object Types button. (see screenshot below)



6. Check all the boxes for Object types, and click/tap on the OK. (see screenshot below)



7. Click/tap on the Find Now button, select the name of the user or group (ex: "Users") you want to add, and click/tap on OK. (see screenshots below)

*tip If you like, you can press and hold the Ctrl key to select more than one user and/or group.





8. Click/tap on OK. (see screenshot below)



9. Click/tap on OK. (see screenshot below)



10. When finished, you can close Local Users and Groups if you like.





OPTION TWO [/i] Prevent Users and Groups to Log on with Remote Desktop in Local Security Policy
*note Local Security Policy is only available in the Windows 10 Pro, Enterprise, and Education editions.

All editions can use Option Three below.
1. Press the Win+R keys to open Run, type secpol.msc into Run, and click/tap on OK to open Local Security Policy.

2. Expand open Local Policies in the left pane of Local Security Policy, click/tap on User Rights Assignment, and double click/tap on the Allow log on through Remote Desktop Services policy in the right pane. (see screenshot below)



3. Select the user or group (ex: "Users") you want to remove, and click/tap on the Remove button. (see screenshot below)

*tip If you like, you can press and hold the Ctrl key to select more than one user and/or group.



4. Click/tap on OK. (see screenshot below)



5. When finished, you can close Local Users and Groups if you like.





OPTION THREE [/i] Allow or Prevent Users and Groups to Log on with Remote Desktope in Command Prompt
1. If you haven't already, you will need to do the following below before continuing on to step 2 below.
A) Download the ntrights.exe file below from the Windows Server 2003 Resource Kit Tools.
Download
B) Save the ntrights.zip file to your desktop, and unblock it.

C) Open the ntrights.zip file, copy or move the ntrights.exe file into your C:\Windows\System32 folder, and click/tap on Continue to approve.
2. Open an elevated command prompt.

3. Type the command you want below into the elevated command prompt, and press Enter.
(Add user or group to allow)
*Arrow ntrights +r SeRemoteInteractiveLogonRight -u "User or Group"

OR

(Remove user or group to prevent)
*Arrow ntrights -r SeRemoteInteractiveLogonRight -u "User or Group"

*note Substitute User or Group in the command above with the actual name of the user or group (ex: "Users") you want to add or remove for this policy.

For example: ntrights +r SeRemoteInteractiveLogonRight -u "Users"
4. When finished, you can close the elevated command prompt if you like.

That's it,
Shawn


Related Tutorials

• How to Add or Remove Users from Groups in Windows 10
• How to Change User Rights Assignment Security Policy Settings in Windows 10
• How to Allow or Prevent Users and Groups to Sign in Locally to Windows 10
• How to Deny Users and Groups to Sign in Locally to Windows 10
• How to Add or Remove Remote Desktop Users in Windows
• How to Deny Users and Groups to Log on with Remote Desktop in Windows 10
• How to Enable or Disable Remote Desktop Connections to a Windows 10 PC
• Enable or Disable Always Prompt for Password upon Remote Desktop Connection to Windows PC
• How to use Remote Desktop Connection to connect to and from your Windows 10 PC
• How to Add a Remote Desktop Connection in Remote Desktop app on Windows 10 PC

:)

 

after windows 10 pro upgrade - no "remote desktop users" group

After Pro upgrade, I was unable to assign users to allow remote desktop. "Select Users ..." button is greyed out.

There is no "Remote Desktop Users" group

Tried manually adding the group with no success.

Also tried group policy with no success.

Any suggestions?

 

remote desktop woe`s

Users that are part of the Remote Desktop Users group and have a password set would be able to log into the computer remotely.

 

Remote Desktop

Okay guys need some help here before going crazy...
I am trying to setup a remote desktop connection and see exactly what the logged on user is looking at with out going through Windows Remote Desktop.

Since its local network I don't have any password or want to setup a password.

Any suggestions are appreciated

 

Windows 10 Remote Desktop - The connection was denied because the user account is not authorized for remote logon

"open secpol.msc

go to \Local Policies\User Rights Assignment

double-click on Allow log on through Remote Desktop

Services --> Add Users or Group --> enter Remote Desktop Users

Start-->Run-->services.msc

Look for Remote Desktop Services and make sure the Log on account is Network System, not Local Service.

Check your event logs."

team viewer is a screen share and remote desktop tool via internet

 

Remote Desktop App error

Chris,

This is probably to do with the default certificate not being accepted through your router, i.e your phone being on the internet and needing to connect to your pc behind a firewall.

However, your post is very interesting to me, as I am having an issue on my internal WIFI network. Microsoft Remote Desktop App" from a Nokia Lumia Mobile phone. I will continue with my discussion for MS
to answer

PHONE: Nokia Lumia 810

Operating System Version: 8.10.14234.375

IMEI: on request:

APP in question: Microsoft Remote Desktop

Version: 8.1.9.11

Client: Windows 10 Professional

Issue:

After discovering that windows 10 Home does not support RDP, I decided to pay for Windows 10 Professional to enable Remote Desktop from my phone.

Steps Taken:

Windows 10 Professional

• Click on Files and Folders | Right Click | Properties
• Remote Settings
• Allow Remote connections for this computer NOTE: ensure only allow connections from computers running Remote Desktop with Network Level Authentication (Recommended)
  Ticked

• Select Users j*****@e****.*** is selected
• Change Windows Account Password
• open compmgmt.msc | Go to Local Users & Groups | Groups | Remote Desktop Users | check that account is in the members Window Example J*****
• Open Windows Firewall with advanced Security

Inbound Rules

Remote Desktop Shadow (TCP in) - Enabled Yes Public Allow

Remote Desktop User Mode (TCP in) -Enabled Yes Public Allow

Remote Desktop User Mode (UDP in) -Enabled Yes Public Allow

Outbound Rules

Remote Assistance (PNRP-Out) -Enabled Yes Public Allow

Remote Assistance (TCP-Out) -Enabled Yes Public Allow

Network and Sharing Center

• Right Click on Computer with plug in the
  tray | Open Network and Sharing Center
• Click on HomeGroup | Change Network Location
• Click Close

Windows Phone 8.1 Update

• Desktops | (+) Desktop | PC Name xxx.xxx.x.xxx
• Credentials - Add Credentials | PCNAME\J***** OR MicrosoftAccount\J*****@E****.O**
  OR PCNAME\Administrator
• Click

ERROR MESSAGE

We Couldn't connect to the remote PC. This might be because of a network problem. If this keeps Happening, ask your admin or tech support for help

Inquiring minds may find this error code helpful: 0x704

| Close

Steps Taken to try and resolve 0x704

• uninstall 8.1 Remote Desktop App
• Reboot Windows 10 Professional
• Phone Microsoft support through third party +44 333 200 2197,,7355531217

References

0x704 Error on Remote Desktop App : windowsphone

RDC - Connect Remotely to your Windows 10 PC

Conclusion

MS is this because windows 10 professional is not supported by a free Microsoft remote desktop tool? Or can you clarify on where I was going wrong, as I need this to work.

Please contact me on *** Email address is removed for privacy ***