how to allow users to remote desktop to server 2012

Next right click with your mouse on Limit Number of Connections and click Edit.

If youre remotely connecting to a PC on your home network from outside of that network, dont select this option. The point of BUILTIN is that it applies to all DCs (and only DCs, btw). This guide will explain how to allow multiple sessions in a Windows VPS. Click Select Users, located in the Remote Desktop section of the Remote tab. Click Allow remote access, located under the System tab. Click System and Security once the Control Panel opens. I’m not even going to get into putting management servers on their own networks and configuring firewall rules, but at least don’t let non Domain Admin techs log onto your DCs!Īlso, using a GPO to add someone to any of the BUILTIN domain groups is ridiculous. Allow Access to Use Remote Desktop Connection Click the Start menu from your desktop, and then click Control Panel.

They need to be run by someone with Schema Admins (and perhaps Enterprise Admins) rights on a domain-joined server in the same site as a DC running the Global Catalog role (preferably the Schema Master).įor other administrators who have been delegated account or computer management rights in the domain, they should use Active Directory Users and Computers (if they need that console) installed preferably on a jump server they can RDP to (or on a workstation, if you must), as well as any other RBAC tools they need for their tasks. Open the start menu and type 'gpedit. Log into the server using Remote Desktop. Double click Limit number of connections and set the RD Maximum Connections allowed to 2. Some products need to have schema modifications in the domain – e.g. Set Restrict Remote Desktop Services user to a single Remote Desktop Services session to Disabled. There should be NO third party tools installed on a DC except by the Domain Admin after careful analysis to determine whether they need to be there.Īnswer, always, is “no”, except for system monitoring tools. There is no reason for ANYONE who is not a domain admin to RDP onto a DC in an enterprise where there are any other admins who are not Domain Admins.

How to allow users to remote desktop to server 2012