Allow log on through Remote Desktop Services registry

Comments:

Logoff required

Default:

On workstation and servers: Administrators, Remote Desktop Users. On domain controllers: Administrators.

Allow users to connect remotely by using Remote Desktop Services

This policy setting allows you to configure remote access to computers by using Remote Desktop Services.

If you enable this policy setting, users who are members of the Remote Desktop Users group on the target computer can connect remotely to the target computer by using Remote Desktop Services.

If you disable this policy setting, users cannot connect remotely to the target computer by using Remote Desktop Services. The target computer will maintain any current connections, but will not accept any new incoming connections.

If you do not configure this policy setting, Remote Desktop Services uses the Remote Desktop setting on the target computer to determine whether the remote connection is allowed. This setting is found on the Remote tab in the System properties sheet. By default, remote connections are not allowed.

Note: You can limit which clients are able to connect remotely by using Remote Desktop Services by configuring the policy setting at Computer Configuration\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Security\Require user authentication for remote connections by using Network Level Authentication.

You can limit the number of users who can connect simultaneously by configuring the policy setting at Computer Configuration\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Connections\Limit number of connections, or by configuring the policy setting Maximum Connections by using the Remote Desktop Session Host WMI Provider.

Supported on: At least Windows Server 2003 operating systems or Windows XP Professional

Enable policy:

To Allow Users or Groups to Logon with Remote Desktop in Windows 10,

1. PressWin+Rkeys together on your keyboard and type:secpol.msc

   Press Enter.

2. Local Security Policy will open. Go toUser Local Policies -> User Rights Assignment.
3. On the right, double-click the option Allow log on through Remote Desktop Services.
4. In the next dialog, clickAdd User or Group.
5. Click on theAdvancedbutton.
6. Now, click on theObject Typesbutton.
7. Ensure that you have theUsersandGroupsitems checked and click on theOKbutton.
8. Click on theFind nowbutton.
9. From the list, select the user account or group to allow log on through RDP for it. You can select more than one entry at once by holding the ShiftorCtrlkeys and clicking on the items the list.
10. Click on theOKbutton to add the selected items to the Object names box.
11. Click on theOK button to add the selected items to the policy list.

You are done.

To undo the change, remove the user account from the list in the Allow log on through Remote Desktop Servicespolicy.

If your Windows edition doesn't include thesecpol.msctool, you can use thentrights.exetool fromWindows 2003 Resource Kit. Many resource kit tools released for previous Windows versions will run successfully on Windows 10. ntrights.exe is one of them.