Lab Guide: How to Enable Remote Desktop on Active Directory
Struggling to remotely access domain computers in your home lab or IT environment? You’re not alone. One of the most essential skills for any IT support professional is configuring secure and scalable Remote Desktop (RDP) access. In this guide, I’ll walk you through how I successfully enabled RDP for domain users using Active Directory and Group Policy in a Windows Server 2022 and Windows 11 setup.
In this lab, I worked with a domain environment consisting of a Windows Server 2022 Domain Controller and a Windows 11 Pro client machine. The goal was simple: allow selected domain users to remotely access a computer using RDP—without giving them full administrative privileges.
1. Create A Security Group
Using Active Directory, I created a group called:
This group is used to manage which users are allowed remote access. Instead of assigning permissions individually, grouping users makes the setup scalable and easier to manage.
2. Configure Group Policy (GPO)
I created a Group Policy Object (GPO) and linked it to the Computers OU. Inside the policy, I navigated to:
Computer Configuration → Preferences → Control Panel Settings → Local Users and GroupsHere, I configured:
Action: Update
Group: Remote Desktop Users (built-in)
Members:
DOMAIN\Access-Users-RDP
This ensures all computers in the OU automatically allow RDP access for that group.
3. Enable Remote Desktop on Target Machine
On the Windows 11 machine, I enabled Remote Desktop via:
Settings → System → Remote Desktop → ONI also ensured the firewall allowed RDP connections for the Domain profile.
4. Apply and Verify Policy
After running:
gpupdate /forceI confirmed that the group was successfully added to the Remote Desktop Users local group.
5. Test RDP Connection
Using Remote Desktop (mstsc), I connected to the target PC using:
DOMAIN\usernameAt first, I encountered an error but the issue was simply forgetting to include the domain name in the login. Once corrected, the connection worked perfectly.