Windows Server 2008 Tip: Add Remote Login privilege to Remote Desktop Users Built in Group

Here’s a tip for Administrators using Windows Server 2008 from my recent experience working with a new SharePoint 2007 VM.

The Remote Desktop Users Built in Group in Windows Server 2008 does not have permissions to log in remotely. At least not on the machine I just installed. Here’s the problem and how I fixed it.

One of the new features of Windows Server 2008 is the new Server Manager, pictured below. It provides a summary of your computer information, the installed roles and features and links to relevant configuration options. It’s a great user interface improvement. I love it. The problem comes with the option I’ve highlighted in red, Configure Remote Desktop. Once you configure this to add new users they can’t login remotely yet.

Let’s take a closer look. Selecting Configure Remote Desktop brings up a system properties dialog on the Remote tab, see below. I’ve selected Allow connections from computers running any version of Remote Desktop because RDP in Windows XP doesn’t support the new Network Level Authentication.

Clicking select users pulls up the Remote Desktop Users built in Security Group for modification. Great, I’ll add my development VM user jpopsco. Seems like this should work, but not quite.

When I try to login with jpopsco I receive the error that he’s either not in the group Remote Desktop Users or the group doesn’t have the Allow Remote Login privilege. Bingo, that’s the one.

The Solution

Now that we know the problem, the solution is easy. Add the needed privilege as shown below.

So that’s my first issue and solution with Windows Server 2008. Are you using Windows Server 2008? Let me know how you like it by adding comment or sending me an email through the Contact link at the top of the page.