Test User cannot login WS via Remote Desktop


I know this is not a new topic but I believe I may have missed some steps, and Experts, please help me out. My problem is I have created a test user which is a Domain Users, I am trying to login my workstation via Remote Desktop by using this test user, however I was stopped by

"The connection was denied because the user account is not authorised for remote login"

What I have done so far were

- Enable Remote Desktop on my workstation(Win7) "Allow connection from computers running any version of Remote Desktop"

- On Domain Controller, I have edited Default domain Policy
    Computer Configuration\Policies\Administrative Templates\Network\Network    Connections\Windows firewall\Domain Profile. I enabled Allow inbound Remote Desktop exceptions, I set value is *

   Computer Configuration\Policies\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Connections. I enabled Allow users to connect remotely by using Remote desktop Services. And just optional, I also enabled Limit number of connections to 999999 (unlimited)

- I have added the test user to Remote Desktop Users group

- I have tried to run gpupdate , and also gpupdate /force. And even restart both the DC and the workstation. But I am still being stopped by that error.

I have read some sources that said I should add the test user to Remote Desktop Users when you enable Remote Desktop on workstation. I think it may work out this way but what if you had 1000 users?

So, Experts, please help me out. Which steps am I missing here? What should I configure on the Domain controller to enable the domain users can logon WS via Remote Desktop? Thank you.

Kind regards,
Who is Participating?
phucdkConnect With a Mentor Author Commented:

Thank you for your help, after googling around I managed to make this work by adding the Remote Desktop Users Group to Default Domain Policy\computer configuration\windows settings\Security Settings\Restricted Groups.

And in Remote Desktop Users Group I added Domain Users.

could anyone please explain why after putting  Remote Desktop Users Group into Restricted Groups, this allows users login via Remote Desktop? Thank you.

Carl BohmanCommented:
The most common cause I've seen for that error is that the user is not a member of the Remote Desktop Users group.  After running gpupdate, is the user still in that group on the workstation?
deroodeSystems AdministratorCommented:
Is the user member of the local workstation Remote Desktop Users group? you can easy make the mistake of adding the user to the domain "Remote Desktop Users" group, which doesn't work.
Also in our organization we have a domain "Remote Desktop" group, which is added by group policy to all workstations local Remote Desktop Users group; When this is the case, after you add a user to the domain "Remote Desktop" group make sure the users re-authenticates.
phucdkAuthor Commented:
The only solution that i can solve my problem is like in my own answer
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.