Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 3006
  • Last Modified:

Remote Desktop Access for Power Users

Admins,

Is there an easy way to give RDP access to Power Users?
I don't want to give out Administrator access to certain users but, when I try to log in, (when they are in power users group) the system says this user must be in Administrator to log in.
Even though they are in "Remote Desktop Users" group.
Is there anyway to bypass this to give them access?
0
wbokhary
Asked:
wbokhary
  • 5
  • 3
  • 2
  • +1
1 Solution
 
Vinamilk1001Commented:
hello,
Make the user a member of the remote desktop user is sufficient. (Check under "Users and group" )
The issue come from another part . Check of your GPO if there are not restrictions allowing login via terminal services .

Are you using Terminales service or just want to take control of a computer with remote desktop ?
0
 
Hypercat (Deb)Commented:
If they are trying to use remote desktop to log in to a server, then they have to have administrative rights to the server to do so.  You cannot use the standard (non-administrative) remote desktop connection to a Windows server unless that server is running terminal services in application server mode.  That requires special licensing and setup.
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 
wbokharyAuthor Commented:
Vinamilk1001:
The users will just use RDP.  The users are already part of "Remote Desktop Users" But it does not work. The system says they must be part of the "Administrators" group

hypercat:
that's pretty bad / sad news.
0
 
wbokharyAuthor Commented:
hypercat:
Is there anyway to overcome this issue?
I just want them to be of PowerUsers group. (not the admin)
0
 
Hypercat (Deb)Commented:
The only way to allow them to connect to the server using RDP would be to make the server a terminal server and get TS licensing for the users.  Could you explain why you need them to use an RDP session to the server? Maybe there's an alternate solution that we could come up with.  How many users need this type of access to the server?
0
 
wbokharyAuthor Commented:
hypercat:
Only 1 or 2 users. that's all.
They are outside vendors so we don't want to give them other privileges such as file permissions or snoop around in folders which are not intended for them.
What other solutions could we try?
thanks
0
 
Hypercat (Deb)Commented:
It depends on what the vendors are going to be doing. Would a straight VPN connection be adequate for them to do what they need?  Another possible solution would be to use a remote control app like VNC (free) or pcAnywhere (low cost) to allow the vendor to connect to your server.  You'd have to be sure that you have the server logged off (at the login screen) when they connect.  Then, you can give them a non-admin login to log on to the server.
0
 
wbokharyAuthor Commented:
You know hypercat:
We are wrong, non administrators can RDP into a Windows 2003 server, just not the "console session" that's what I was trying to do, (inadvertently) using "Remote Desktops"
Once I removed that checkmark, (connect to console) everything started working normally.
Vinamilk1001 was right all along, I think he deserves the points here.
0
 
wbokharyAuthor Commented:
Great Insight and Answer
0
 
Vinamilk1001Commented:
Thanks.
0

Featured Post

Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

  • 5
  • 3
  • 2
  • +1
Tackle projects and never again get stuck behind a technical roadblock.
Join Now