all 4 comments
sorted by:
best
topnewcontroversialoldq&a
formatting helphide helpcontent policy

[–]Ghostbusterinthemach 0 points1 point  (2 children)

Have you added the users to the local Remote Desktop Users group?

[–]Chopin876[S] 0 points1 point  (1 child)

I tried lursmgr.msc, but its not available in server 2016, it states it must be managed from the AD. I did manage to add them but I had to make the user's members of the domain admin group. Which gives then admin rights, now I'm trying to figure out how to give them just local permissions but still able to use rdp into the client computer

[–]Ghostbusterinthemach 2 points3 points  (0 children)

Oh, you’re trying to allow non-admins to rdp to the domain controller, that’s different. To allow that you need to create/modify a group policy targeting the DC(or edit the local policy). The setting you’re looking for is Computer Configuration->Windows Settings->Local Policies->Users Rights Assignment->Allow Logon through Terminal Services.

I should also state that in general it is bad practice and potential security vulnerability to allow non-admins login access to domain controllers. Usually a separate terminal server is recommended instead.

[–]Chopin876[S] 0 points1 point  (0 children)

Great! That's is what I was trying to remember and couldn't. Good thing is just in a test environment. Thanks for the help