<div>
So this could be a couple of things. You need to locate the GPO that applies the group that is authorized for RDP access. The reason it works for Domain Admins is that they are already in the RDP group.<br><br>My guess is someone removed or edited your AD group that contains the people who are authorized for remote access.
</div>


<div>
No one edited the AD group. &nbsp;It is the same as it has been for 5 years. &nbsp;I looked at 10 users and they are all a member of the the groups below. &nbsp;It worked until yesterday. &nbsp; <br><br><br>
</div>


Screen-Shot-2021-07-28-at-3.05.44-PM.png

<div>
Look at the remote servers Remote Desktop Users Group on the Terminal Server. Does it have the AD group in it?
</div>


<div>
I have a meeting to go to but I have a user that I know worked yesterday and nothing has changed and I added them to the RDP server. &nbsp;See screenshots. &nbsp;This works. &nbsp;Why?<br><br><a href="https://filedb.experts-exchange.com/incoming/2021/07_w31/1567766/Screen-Shot-2021-07-28-at-3.45.36-PM.png" rel="ugc"><img src="https://filedb.experts-exchange.com/incoming/2021/07_w31/1567766/Screen-Shot-2021-07-28-at-3.45.36-PM.png" class="fr-fic fr-dib"></a><br><a href="https://filedb.experts-exchange.com/incoming/2021/07_w31/1567767/Screen-Shot-2021-07-28-at-3.45.46-PM.png" rel="ugc"><img src="https://filedb.experts-exchange.com/incoming/2021/07_w31/1567767/Screen-Shot-2021-07-28-at-3.45.46-PM.png" class="fr-fic fr-dib"></a><a href="https://filedb.experts-exchange.com/incoming/2021/07_w31/1567768/Screen-Shot-2021-07-28-at-3.45.51-PM.png" rel="ugc"><img src="https://filedb.experts-exchange.com/incoming/2021/07_w31/1567768/Screen-Shot-2021-07-28-at-3.45.51-PM.png" class="fr-fic fr-dib"></a>
</div>


Screen-Shot-2021-07-28-at-3.45.46-PM.png

Screen-Shot-2021-07-28-at-3.45.51-PM.png

Screen-Shot-2021-07-28-at-3.45.36-PM.png

<div>
Your screens are configured for admin sessions. This is NOT the "normal user" RDP deployment you're following.<br>Please look at the Server Manager &gt; Remote Desktop Services<br>The correct user group is visible after you drill down to the custom collection you created when you configured the RDS.
</div>


Chief Information Security Officer

Andrew Porter

Visual Designer & Video Editor 

Jazz Marie Kaur

<div>
No idea how to drill down to that. Is this the create collection wizard?<br><br><br>
</div>


Screen-Shot-2021-07-28-at-4.51.58-PM.png

<div>
That screen showed you never added a collection, meaning, you never deployed your RDS server (farm) properly. Users were probably always admin, so you have a whole fleet of normal users acting like admins. Nothing more scary than that. Please look at the RDS whitepapers again and finish your deployment as soon as possible.<br><br><a href="https://docs.microsoft.com/en-us/windows-server/remote/remote-desktop-services/rds-plan-and-design" rel="ugc">https://docs.microsoft.com/en-us/windows-server/remote/remote-desktop-services/rds-plan-and-design</a><br>Read it all through, and don't forget to flow over to the "Build &amp; Deploy" chapter
</div>


<div>
This is very odd. &nbsp;As you can probably tell I am not an expert at server admin, more on the end user side of things. &nbsp;When you said above that the RDS server (farm) was never deployed it confuses me becasue we had an IT firm that we have used for many years setup the RDS server and our DHCP/DNS server. &nbsp;I'm surprised they did this incorrectly. &nbsp;The guy in charge of this has several clients and been in the industry for 25 years. (I know that doesn't mean he can't do this incorrectly, just letting you know) <br><br>&nbsp;Would there be any reason why this was not deployed properly?<br><br>
</div>


mkramer777

<div>
<div class="content wysiwyg-content fr-view">
All of a sudden every user that tries tro login to the RDP server gets the message of: "The connection was denied becasue the user account is not authorized for remote login." &nbsp;Only way would be (not doing this) to add them as domain admin. &nbsp;What should I check? &nbsp;All was fine yesterday.<br><br><br>
</div>
</div>



All of a sudden every user that tries tro login to the RDP server gets the message of: "The connection was denied becasue the user account is not authorized for remote login."  Only way would be (not doing this) to add them as domain admin.  What should I check?  All was fine yesterday.

remote desktop connection problem

Remote access may refer to the connection to a data-processing system from a remote location, for example through a virtual private network remote desktop software, terminal emulation, or the activation of features of a business telephone system from outside the business's premises.