RDP Works Only with MSTSC Admin: How to Give Admin Rights
RDP works only with mstsc/admin, is there any possible way to establish RDP connection without admin rights?The answer is YES! Here in this post, we will cover how to grant permissions to non-admin rights and establish RDP connections between PCs.
Scenario: RDP works only with mstsc/admin
Hi, I have a Windows 10 computer configured with Remote Desktop Services, but currently, RDP works only with mstsc/admin group. I try everything. I create a new user but it said the group must have the rights. What is missing? Thanks in advance.”
- Question from Caroline
How to establish RDP connection without admin rights
To create an RDP connection between PCs, the remote computer must have RDP enabled by default, and your user account must be a member of the Administrator group on the target device to conduct administrative operations.
If your devices are not belong to the same RDP admin, don’t worry, here is how to add users to the domain users group and establish the RDP connection.
Part 1. Allow RDP to non-admin users
Step 1. On the remote PC, press "Win + R", type in “gpedit.msc” and hit “OK” to open Group Policy Editor.
Step 2. Go to: Computer Configuration > Windows Settings > Security Settings > Local Policies > User Rights Assignment. Double click Allow log on through Remote Desktop Services.
Step 3. Click Add User or Group... to add Remote Desktop admin users.
Step 4. Enter the object name for example "remote" in the blank and then click "Check Names".
Step 5. When you get the name, click OK to take effect.
Part 2. Establish RDP connection between PCs
Before operations, make sure your remote device is Windows Pro/Enterprise edition, and you are only allowed to use RDP in same local network unless you perform VPN or port forwarding.
Step 1. On the remote computer, navigate to Settings > System > Remote Desktop, turn On Remote Desktop and click Confirm.
Step 2. Launch Control Panel and click System and Security > Windows Defender Firewall > allowed apps, then tick Remote Desktop.
Step 3. On the local computer, press Win + R and type “mstsc”.
Step 4. Enter the IP address and username of the host PC, then click Connect.
Step 5. Enter the password and hit OK if prompted.
AnyViewer: Best RDP alternative without admin limitations
Since RDP works only with mstsc/admin by default, you may look for an RDP alternative to access remote device without having admin rights. In this case, you can’t miss the professional remote desktop software AnyViewer for the following advantages over RDP.
- It allows remote connection from any computer in anywhere without admin rights.
- It supports over-Internet connections without VPN or port forwarding.
- It is compatible with Windows OS and Windows Server OS, including Windows Home/Standard editions.
- It enables unattended remote access.
- It offers built-in chat.
- It has high file transfer speed.
- It won’t compulsorily lock the remote screen during a remote session, you can manually blacken it in privacy mode.
Download AnyViewer on your devices and let’s start the session!
Step 1. Launch AnyViewer on host computer, go to Log in, and click Sign up.
Step 2. Fill the information and click Sign up.
Step 3. Launch AnyViewer on client computer, log in to the same account, and here you can see the assigned devices.
Step 4. Go to Device, select the computer you want to remote into, and click One-click control.
When you established the connection, there are a lot of built-in operations from the toolbar.
- Notes:✎...You can also upgrade to a Professional or Enterprise plan then the following rights will thereafter be yours:
- Assign more devices.
- More concurrent connection channels for an Enterprise plan.
- More simultaneous sessions.
- High-quality image.
- Transfer unlimited files at once.
- ...
Conclusion
RDP works only with mstsc/admin, how can I get an RDP connection without admin rights? Here in this post, we introduced how to add users to the Remote Desktop group, and we also introduced a remote desktop tool AnyViewer that allows remote connection without admin rights.