How to Configure Remote Desktop Users Group Permissions [Full Guide]

This post offers a complete guide on configuring Remote Desktop Users group permissions. If you're looking for an easier method to manage user group permissions for remote access, this post presents a better solution.


By Ellie / Updated on May 28, 2024

Share this: instagram reddit

What is the Remote Desktop Users group?

The Remote Desktop Users group is a built-in group in Windows operating systems that grants its members the permissions needed to establish remote desktop sessions. By adding users to this group, administrators can control who is allowed to connect to the system remotely.

Group permissions play a pivotal role in ensuring that only authorized individuals have remote access to critical systems. Properly configured permissions help maintain security, preventing unauthorized access, and ensuring that users have the appropriate level of access needed to perform their tasks.

Default Remote Desktop Users group permissions of members

Members of the Remote Desktop Users group typically have the default permissions necessary to remotely connect to a computer via Remote Desktop Protocol (RDP), but they do not have administrative privileges on the system. By default, Remote Desktop Users group permissions of members are listed as follows:

  • Remote logon rights: Allows users to log on to the system remotely.
  • User profile access: Grants access to their user profiles and home directories.
  • Application execution: Enables users to run applications installed on the remote system.

4 ways to configure Remote Desktop Users group

Remote Desktop Users group management can be handled in various ways. The following options outline several common methods for adding a new member to the Remote Desktop Users group:

Option 1. Adding a user to Remote Desktop Users group via Users folder

Step 1. Open the “Local Users and Groups” interface by clicking on the “Start” menu> typing "lusrmgr.msc" in the search bar > pressing “Enter”. In the left pane, select "Users."

Step 2. Double-click on the user you want to add to the Remote Desktop Users group.

Step 3. In the User's Properties window, go to the "Member Of" tab.

Step 4. Click the "Add..." button, then enter the user name into the provided text box, and finally confirm the action by selecting "OK".

Local Users and Groups Users

Option 2. Adding a user to Remote Desktop Users group via Groups folder

Step 1. Right-click the “Start” menu and choose “Computer Management”.

Step 2. In the Computer Management window click on "Local Users and Groups" right-click the "Groups" folder and double-click “Remote Desktop Users Group”.

Step 3. Click on the "Add..." button.

Step 4. Following that, within the Select Users window, you'll input the name of the session you've recently established into the designated field. Proceed by clicking "Check Names" adjacent to it, whereby the name will be underscored to denote successful identification and acceptance of the user.

Local Users and Groups Groups

Option 3. Adding a user to Remote Desktop Users group via system settings

Step 1. To configure Remote Desktop Users group permissions on Windows 10 and 11, click the “Start” menu from your desktop, and then click “Control Panel”.

Step 2. Click “System and Security” once the Control Panel opens.

Step 3. Click “Allow remote access”, located under the “System” tab.

Allow Remote Access

Step 4. Navigate to the "Remote" tab and locate the "Remote Desktop" section. Within this section, click on "Select Users".

Step 5. Click “Add” from the System Properties box.

Step 6. Input the user's name into the provided text box, then proceed by clicking "OK".

System Properties Add Users

Option 4. Adding a user to Remote Desktop Users group via Server Manager

Step 1. To configure Remote Desktop Users group permissions on Windows Server 2019 and 2022, click on the "Start" menu. Search for "Server Manager" and open it.

Server Manager

Step 2. Select "Local Server" from the left pane.

Step 3. Click the blue text next to "Computer Name."

Server Computer Name

Step 4. Access the "Remote" tab, and then select the "Select Users..." button.

Step 5. Click the "Add" button.

Step 6. Enter the user's name in the text box and click "OK".

Server Select Users

Bonus tip: Better way to manage remote desktop users group permissions

AnyViewer is a comprehensive remote access and remote control software that allows users to connect to and control computers and devices from anywhere in the world. It is widely used for a variety of purposes, including technical support, remote administration, and collaborative work.

AnyViewer allows you to group users and assign role permission with ease. Administrators can create sub-account role groups for employees at various levels and assign specific permissions to each group. This feature is particularly useful in scenarios where you need to restrict sub-accounts under different roles to access and operate only certain functions, thereby preventing unauthorized access and potential data breaches.

Here are the steps to go:

Step 1. Start by downloading and installing AnyViewer on your main computer and sign up for an account.

Download Freeware Win PCs & Servers
Secure Download

Log in AnyViewer

Step 2. The role permission management feature is exclusive to AnyViewer Enterprise Edition, please upgrade your account after registering.

Step 3. On your main computer, click "New Team".

New Team

Step 4. Click “Role Permission” > “Create new role”.

Role Permission

Step 5. After creating the new role, choose “Edit permission settings”.

Edit Permission Setting

Step 6. You can assign permissions for the role you create.

Permission Setting

Step 7. Go to “Member list” > “Add Sub Account” > fill in the information needed. This is how you configure different role permissions for sub-accounts.

Add Sub Account

The AnyViewer Enterprise Edition offers more features such as unlimited concurrent remote sessions, Mass Deployment (MSI), creating groups for computers, etc.

The bottom line

In conclusion, mastering the configuration of Remote Desktop Users group permissions is essential for effective remote access management. This guide has outlined multiple methods for adding users to this group, empowering administrators to control access with precision.

Additionally, leveraging tools like AnyViewer streamlines the process, offering advanced features for role-based permission management. By implementing these strategies, organizations can enhance security, streamline administration, and ensure that remote users have the necessary access tailored to their roles, ultimately facilitating seamless and secure remote connections.