IT:AD:lusrmgr.msc:HowTo:Add a User to the RDP Group
Summary
A user cannot remote in to a computer unless he/her has been added to the IT:AD:RDP group.
When creating service accounts, there should be no need to IT:AD:RDP in – except during initial configuration time, when setting up variables in the user specific settings folders (eg: %UserProfile%\Roaming\foo\bar).
Make absolutely sure you remove this RDP authority after finishing configuration.
Process
- Start/Run/
lusrmgr.msc - Navigate to
Groups - Select
Remote Desktop Users - Add the account.
If you have issues, see: