windows server 2012 remote desktop user not allowed

To securely access your work computer or Remote Desktop Session host servers in your company data-center Microsoft created Remote Desktop Gateway role that basically is a secure tunnel that allows you to access corporate servers. Adding the domain global group to the local group on each PC works, but smells weird to me.Lately a lot of people love to work from home a day or two a week or if they have some kind of private obligations sometimes it is easier to access the work environment from home. It seems like no matter what I change, only the default groups are granted the RDP login right. The group policy results wizard shows the same thing.ĭeny log on through Remote Desktop Services is empty (default is empty) Looking at Local Security Policy -> Policies -> Windows Settings -> Security Settings -> Local Policies -> User Rights Assignment -> Allow log on through Remote Desktop Services shows only the GlobalRDP group and that the policy set via GPO. The GPO is absolutely applied to the target computers. To address fixes that were offered in similar threads: Here is the setting screen from a Windows 10 workstation:

Despite the fact that this local group still wasn't granted the RDP login right! What made things weirder is that I also removed the RDP right for Administrators and Remote Desktop Users groups that have this right by default and I was still able to RDP in as member of the local Remote Desktop Users group.įinally, I changed my GPO to add the GlobalRDP group to the local Remote Desktop Users group of the target PCs, and RDP worked. A similar access denied error appears in the RDP log 'User is not granted access to this connection' in CUMRDPSecurityStreamCallback::AccessCheck at 5236 err='. I granted the GlobalRDP group the 'Allow log on through Remote Desktop Services' right and that policy has been successfully deployed to the target computers.ĭespite this, whenever a member of the GlobalRDP group attempts to login via RDP, they receive the following error: 'The connection was denied because the user account is not authorized for remote login'. I am trying to allow members of a domain security group, GlobalRDP, to RDP into certain Windows 10 PCs.

Windows server 2012 remote desktop user not allowed