Allow users to connect remotely by using Remote Desktop Services

Supported OS tags: Windows10, Windows10RT, Windows11, Windows7, Windows8, Windows81, WindowsRT, WindowsRT81, WindowsServer2003, WindowsServer2008, WindowsServer2012, WindowsServer2012R2, WindowsServer2016, WindowsVista, WindowsXP

This policy setting allows you to configure remote access to computers by using Remote Desktop Services. If you enable this policy setting, users who are members of the Remote Desktop Users group on the target computer can connect remotely to the target computer by using Remote Desktop Services. If you disable this policy setting, users cannot connect remotely to the target computer by using Remote Desktop Services. The target computer will maintain any current connections, but will not accept any new incoming connections. If you do not configure this policy setting, Remote Desktop Services uses the Remote Desktop setting on the target computer to determine whether the remote connection is allowed. This setting is found on the Remote tab in the System properties sheet. By default, remote connections are not allowed. Note: You can limit which clients are able to connect remotely by using Remote Desktop Services by configuring the policy setting at Computer Configuration\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Security\Require user authentication for remote connections by using Network Level Authentication. You can limit the number of users who can connect simultaneously by configuring the policy setting at Computer Configuration\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Connections\Limit number of connections, or by configuring the policy setting Maximum Connections by using the Remote Desktop Session Host WMI Provider.

This policy has no additional user input fields.

• Computer
  Allow remote start of unlisted programs

  WindowsServer2008
• Computer
  Automatic reconnection

  At least Windows Server 2003 operating systems or Windows XP Professional
• Computer
  Configure keep-alive connection interval

  At least Windows Server 2003
• Computer
  Deny logoff of an administrator logged in to the console session

  At least Windows XP and Windows Server 2003 only
• Computer
  Limit number of connections

  At least Windows Server 2003
• Computer
  Restrict Remote Desktop Services users to a single Remote Desktop Services session

  At least Windows Server 2003
• Computer
  Select network detection on the server

  At least Windows Server 2012, Windows 8 or Windows RT
• Computer
  Select RDP transport protocols

  At least Windows Server 2012, Windows 8 or Windows RT
• User
  Set rules for remote control of Remote Desktop Services user sessions

  Windows Server 2008 R2, Windows Server 2008, Windows Server 2003, Windows 7, Windows Vista, and Windows XP
• Computer
  Set rules for remote control of Remote Desktop Services user sessions

  Windows Server 2008 R2, Windows Server 2008, Windows Server 2003, Windows 7, Windows Vista, and Windows XP
• Computer
  Suspend user sign-in to complete app registration

  At least Windows 8 Enterprise or Windows Server 2012
• Computer
  Turn off Fair Share CPU Scheduling

  At least Windows Server 2008 R2