How to Allow Users and Groups to Log On with Remote Desktop Remote Desktop Protocol is a powerful Windows feature that helps IT teams troubleshoot devices and enables employees to access their computers remotely. We’ll show you how to manage Remote Desktop access in this video. Before we begin, be sure to subscribe to NinjaOne's IT Video Hub and our YouTube channel for more tech content like this. What Is Remote Desktop Protocol (RDP)? Remote Desktop Protocol— RDP for short— allows users to log on to a Windows machine over a network using Remote Desktop Services. It's widely used for remote support, system management, and enabling remote work. For organizations, RDP not only improves productivity, but also enhances security by restricting who can access endpoints. Who Can Use Remote Desktop? By default, only administrators have access to Remote Desktop. They can change settings, add new users, or restrict access as needed. Standard users, on the other hand, must be added to the Remote Desktop Users group by someone with the right permissions. Why Manage Who Can Log On with Remote Desktop? Controlling RDP access isn’t just about convenience; it’s about security. By managing permissions, you can prevent unauthorized logins, limit access to sensitive systems, and ensure that only the right users can troubleshoot or work remotely. Windows gives you several ways to do this— starting with System Properties. How to Allow Users and Groups to Log On with Remote Desktop Method 1 — Use System Properties First, open Settings and go to System and then Remote Desktop. Under User Accounts, click Select users that can remotely access this PC. In the window, click Add and enter the user or group name. Then click OK to apply the changes. Method 2 — Use Group Policy Editor (Pro & Enterprise Editions) If you're running Windows Pro or Enterprise, you can configure RDP access via Group Policy. Start by opening the Local Group Policy Editor and navigating to this location: Computer Configuration > Windows Settings > Security Settings > Local Policies > User Rights Assignment Next, double-click Allow log on through Remote Desktop Services. Then click Add User or Group, enter the name, and select Confirm. How to Prevent Users and Groups from Logging On with Remote Desktop Revoking RDP access for security purposes is just as simple as enabling it. Method 1 — Use System Properties Through System Properties, navigate to the Select users that can remotely access this PC option using the same steps in the previous section. Then select the user or group and click Remove. Method 2 — Use Group Policy Editor To disable access via Group Policy, navigate to the same path in the previous section and double-click Deny log on through Remote Desktop Services. Add the user or group you want to block and click Confirm. In the end, Remote Desktop is a key productivity and support tool for modern businesses. With the right configuration, your team can work securely and efficiently—whether in the office, at home, or on the go. For more information, check out our official blogpost on configuring Remote Desktop Access, linked in the description below.