How to let the users log on to their machine from home using remote desktop without them having to be administrators of their local machine?

Posted on 2006-11-17
Medium Priority
Last Modified: 2010-04-18

I am an administrator of a domain and the users connect from outside the network to their local computer using remote desktop. I created a gpo last night under the computer OU "Computer Configuration...Windows settings...Security Settings...Security Groups and added the Administrator and the domain admins in there. This morning i got a user telling me that she was unable to remotely log on last night to her machine because the local policy did not permit her to log on interactively.
Is there a way to let the users log on to their machine from home using remote desktop without them having to be administrators of their local machine?

Question by:Tacobell2000
  • 2
  • 2
LVL 31

Expert Comment

by:Toni Uranjek
ID: 17965343
You should add appropriate user account to local "Remote Desktop Users" group.

Author Comment

ID: 17965374
So i create a security group called "Remote Desktop Users" and put all the domain users in there and then put the security group in the GPO Security Groups?
LVL 31

Accepted Solution

Toni Uranjek earned 2000 total points
ID: 17965602
That would allow all users to connect to all computer I doubt that is your intention. You should add only one user account to each local group "Remote Desktop Users" which already exists on each Windows XP machine.

Author Comment

ID: 18087446
Thank you.

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

So you have two Windows Servers and you have a directory/folder/files on one that you'd like to mirror to the other?  You don't really want to deal with DFS or a 3rd party solution like Doubletake. You can use Robocopy from the Windows Server 200…
This article provides a convenient collection of links to Microsoft provided Security Patches for operating systems that have reached their End of Life support cycle. Included operating systems covered by this article are Windows XP,  Windows Server…
Hi, this video explains a free download that you can incorporate into your Access databases, or use stand-alone for contact management. Contacts -- Names, Addresses, Phone Numbers, eMail Addresses, Websites, Lists, Projects, Notes, Attachments…
Watch the video to know how one can repair corrupt Exchange OST file effortlessly and convert OST emails to MS Outlook PST file format by using Kernel for OST to PST converter tool. It can convert OST to MSG, MBOX, EML to access them. It can migrate…

600 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question