How to Remote Control PC Without Admin Rights: 4 Effective Methods

Need to remotely access a PC without admin rights

By default, Remote Desktop Protocol (RDP) access is restricted to users with administrative rights. However, there are many cases where standard users also need remote access capabilities. If you're in a similar situation and looking for ways to remote control a PC without admin rights, this guide has you covered.

4 ways to remote control PC without admin rights

Let’s explore four ways to achieve remote access without admin rights, followed by a bonus tip that simplifies the process with a user-friendly remote desktop tool.

Way 1. Granting Remote Desktop access to standard users

By default, Remote Desktop access is limited to administrators. When a standard user tries to connect via RDP, they’ll encounter an error stating: "The connection was denied because the user account is not authorized for remote login."

To enable remote desktop access without admin rights, you can specify which users or groups are allowed during the Remote Desktop setup using the System Properties dialog (accessed via sysdm.cpl in the Control Panel). Any accounts you authorize here are automatically added to the built-in “Remote Desktop Users” group.

If you enable Remote Desktop using other methods, like Group Policy, or need to assign access at a later stage, you’ll have to manually add users to this local group through alternative administrative tools.

Way 2. Using PowerShell to add users to the local group

For managing individual machines, you can either use the MMC-based Computer Management console or leverage the power of PowerShell.

PowerShell provides a set of cmdlets specifically designed to manage local groups. To add an Active Directory group, like RDPUser, to the local Remote Desktop Users group, simply run the following command:

This method is quick, efficient, and ideal for administrators who prefer scripting over manual configuration.

Way 3. Adding users to the Remote Desktop Users Group via Group Policy

In environments with centralized management, Group Policy is the most efficient method for controlling membership in the local Remote Desktop Users group. There are two primary approaches to accomplish this: Restricted Groups and Group Policy Preferences (GPP).

Option 1. Restricted Groups

The Restricted Groups policy allows you to define exactly which users or groups should be members of a specific local group, and optionally, which groups they should belong to. You can find this setting in: Computer Configuration > Policies > Windows Settings > Security Settings. Right-click anywhere in the pane and choose Add Group. A dialog will appear; click Browse to select the local group—in this case, Remote Desktop Users.

Note: On systems using localized Windows editions, group names may appear in the local language. That’s not an issue—group membership is based on the group’s SID (Security Identifier), which ensures compatibility across different language versions.

Once selected, you’ll see two Add buttons:

• The first is used to define which members should be in the group.
• The second specifies which groups this group should belong to (usually not required in this case).

Keep in mind: Restricted Groups strictly enforce the membership list. Any user or group not included in the policy will be automatically removed from the group on target systems.

Option 2. Group Policy Preferences (GPP)

An alternative and more flexible method is to use Group Policy Preferences under: Computer Configuration > Preferences > Control Panel Settings > Local Users and Groups

Here’s how:

Step 1. Right-click and select New > Local Group.

Step 2. Choose the Remote Desktop Users group.

Step 3. Use the checkboxes to remove any existing members as needed.

Step 4. Add the specific users or groups you want included.

The default Update action ensures that membership is maintained in its defined state but doesn’t delete users unless you explicitly configure it to do so. This method is often preferred when you want to append users to a group without overwriting all existing members.

Way 4. Using the Remote Desktop Users Group in Active Directory

The earlier methods focus on adding users to the local Remote Desktop Users group on individual machines. While there is also a group by the same name in Active Directory, simply adding accounts to this AD group won’t grant them Remote Desktop access across all computers in an OU, as one might expect.

This Active Directory group applies exclusively to domain controllers. Members of this group do not receive RDP permissions on member servers or client workstations.

It’s generally advised not to link Group Policy Objects (GPOs) that modify RDP group memberships directly to domain controllers. Doing so may inadvertently add users who normally belong only to local groups to the AD Remote Desktop Users group—something typically avoided for security reasons.

If you deploy a GPO that assigns accounts to the local Remote Desktop Users group and link it at the domain level, those accounts may also end up in the AD Remote Desktop Users group.

Still, membership in the AD group alone won’t enable users to initiate Remote Desktop sessions on domain controllers. They must also be granted the “Allow log on through Remote Desktop Services” permission, which is configured under: Computer Configuration > Policies > Windows Settings > Local Policies > User Rights Assignment.

Without this additional right, RDP access to domain controllers remains blocked despite group membership.

Bonus tip: Try AnyViewer for seamless remote desktop control

While the solutions above focus on how to remote control a PC without admin rights, there are times when having admin access is possible, or eventually granted. In such cases, you’ll want a remote desktop tool that is not only secure and high-performing but also user-friendly.

That’s where AnyViewer shines.

• ✅ Instant remote control with a smooth, low-latency experience
• ✅ One-click remote control once configured
• ✅ Effortless file transfer between local and remote devices
• ✅ Cross-platform support (Windows, Mac, iOS, Android)
• ✅ Built-in chat and multi-session support
• ✅ Robust security encryption to protect your connections

⚠️ Note: AnyViewer requires admin rights for initial setup and full remote control features. However, once installed and configured, it delivers a streamlined remote access experience—ideal for both personal and professional use.

Whether you're working remotely, offering remote IT support services, or just want to help a friend across the country, AnyViewer is a powerful and trusted option worth considering once proper access is available.

👉 Download AnyViewer today and take full control of your remote desktop connections with ease.

Conclusion

Finding a way to remote control PC without admin rights may seem challenging, but it’s entirely achievable with the right tools and configurations. From granting standard users RDP access to leveraging PowerShell and Group Policy, there are several methods to make it work securely and efficiently. And once admin rights are available, solutions like AnyViewer can take your remote support experience to the next level with its seamless performance and rich features. Whether for personal or professional use, you now have multiple options to remote control PC without admin rights effectively.