The most common way to remotely manage a Windows server is through Remote Desktop Protocol. By default, Liquid Web’s Windows servers only allow the members of the administrators’ group remote desktop access. However, the Remote Desktop Users group grants its members access to securely connect to the server through RDP (Remote Desktop Protocol) as well.

This article will go over the basics of the Remote Desktop Users group. By the end, you will be able to add users to the group, understand permissions, and basic user management.

Preflight

The information below covers methods to configure the Remote Desktop Users group for Windows Server 2012 through Windows Server 2016 on any Liquid Web Windows server. 

Managing Local Users and Groups

Users and groups on Windows servers are managed in a number of different ways, but the most user-friendly way is through the Local Users and Groups interface. There are several ways to open the interface. However,  the easiest is to run “lusrmgr.msc”. Lusrmgr.msc can be launched by searching the start menu, command line, or through a run dialog. These methods allow you to find users and groups easily.

User Management

Once you open the Local Users and Groups interface, you will see two folders on the left, one for Users, and one for Groups. By selecting Users, you will see a full list of local users on the server. You can also see a variety of related tasks by right-clicking Users, Groups, a user’s name, or a blank area of the middle pane.

There are several ways to add a new user through the Local Users and Groups interface. These methods all result in the same “New User” dialog box opening where you can then configure a Username, Password, and other options. Choose one of the options below to create a new user:

• With the Users folder selected in the left pane, click the Action menu, then select “New User…”.
• With the Users folder selected in the left pane, click “More Actions” from the right- hand pane, then select “New User…”.
• Right-click the Users folder, then select “New User…”.
• With the Users folder selected in the left pane, right-click in a blank area of the middle page, then select “New User…”.

Once you have created a new user, or have identified the username of the existing user, you are ready to assign that user to a Group. Users assigned to a group are known as group members.

Group Management

As with user management, group management can also be performed in several ways. The options below cover several of the most common ways to assign a new member to the Remote Desktop Users group:

• Select the Users folder from the left pane of the Local Users and Groups interface, open the Users Properties window by double-clicking the user, select the “Member Of” tab, then click “Add…”. Now type “Remote Desktop Users” in the text box and click OK.
• Select the Groups folder from the left pane of the Local Users and Groups interface, double-click the “Remote Desktop Users” group, click “Add…”, enter the user’s name in the text box and click OK.
• Open the system settings by right-clicking the start menu and selecting “System”, choose “Advanced system settings”, select the “Remote” tab, click the “Select Users…” button then click the “Add” button. Now enter the user’s name in the text box and click OK.
• Open the “Server Manager”, select “Local Server” from the left pane, click the blue text next to “Computer Name”, select the “Remote” tab, click the “Select Users…” button then click the “Add” button. Now enter the user’s name in the text box and click OK.

You can also use the “Advanced…” button when selecting users or groups instead of typing its name. Clicking the “Advanced…” button followed by the “Find Now” button will result in a list of users to select.

Notes on Permissions & Security

By default, there are no members of the Remote Desktop Users group and only members of the Administrators group are allowed to connect through RDP. Members added to the Remote Desktop Users group are considered non-Administrative users. These users will be unable to perform most management tasks such as installing software, managing IIS, or rebooting the server.

If a user requires management abilities, the user will need explicit access to that task or will need to be a member of the Administrators. Please use the best practice of “least privilege” when configuring your users, groups, and permissions.

Test/Verify Group Membership

When configuring new user and group memberships, you should always review group membership once complete.  Reviewing group membership is most commonly performed through the Local Users and Groups interface. In addition to verifying membership, we also recommend attempting a remote desktop connection with your newest Remote Desktop Users group member. If you are unable to connect with your user, please see our Remote Desktop Troubleshooting article.

Once you have logged in with your newest member of the Remote Desktop Users group, you can further verify that groups are set up correctly by running the command “whoami /groups” from a command line. The output of this command lists the username and its associated Group names.

问题：

For what ever reason NoMachine will not work on my Network. I cannot log onto the remote PC no matter what. I know my Password is correct but no matter what it will not let me access the Remote PC. I get 4 different error messages and then finally it lets me try to log on but it rejects the correct password every time. I need to complete a Clean Uninstall as each time I try to Reload NoMachine it still holds the previous details so I have no way to start from new.

回答：

After you’ve removed NoMachine “Programs and Features” and rebooted the machine (like indicated in the “Installation Guide” https://www.nomachine.com/DT07M00078#2.3.) remove directories related to nxplayer configurations i.e., .nx (in default: C:/Users/<username>/.nx) and to connection files of NoMachine (default path: C:/Users/<username>/Documents/NoMachine).

概述

RDP（远程桌面协议）是 Microsoft 开发的用于连接远程计算机的协议。

TeamViewer 的功能远远超出 RDP 的功能。

区别

两者的一些主要区别包括：

• 当与 RDP 连接时，其不允许被远程连接计算机的本地用户查看或控制其屏幕，这意味着远程用户不知道您在他们的计算机上正在进行哪些操作。TeamViewer 允许远程用户查看您在他们屏幕上进行的所有操作，这一点对于为客户或朋友/家人提供远程支持至关重要。
• RDP 要求您在远程计算机的防火墙或路由器上配置端口转发。TeamViewer 无需端口转发或其他防火墙配置。
• TeamViewer 拥有更强大的平台支持：您可以使用 TeamViewer 与 Windows、macOS、Linux、Chrome OS、Android、iOS、Windows Mobile、BlackBerry 和 Raspberry Pi 互连。

另外，如果您有用户使用 RDP 登录 Windows Server，则可以使用 TeamViewer 直接连接到每位用户的 RDP 会话，为其提供支持。当 TeamViewer 在 Windows Server 上运行时，它会为每个 RDP 会话生成一个唯一的“用户 ID”，以便您可以连接到该 RDP 会话并帮助该用户。它还会生成一个“服务器 ID”，当您需要在服务器上工作时，可以用该服务器 ID 直接连接服务器控制台。