By default, remote connections are enabled after you install the Remote Desktop Session Host (RD Session Host) role service. You can use the following procedure to add users and groups that need to connect to the RD Session Host server, and to verify or to change remote connection settings.

Membership in the local Administrators group, or equivalent, on the RD Session Host server that you plan to configure, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at

To verify remote connection settings
  1. On the RD Session Host server, start the System tool. To start the System tool, click Start, click Run, type control system and then click OK.

  2. Under Tasks, click Remote settings.

  3. In the System Properties dialog box, on the Remote tab, click either of the following, depending on your environment:

    • Allow connections from computers running any version of Remote Desktop (less secure)

    • Allow connections only from computers running Remote Desktop with Network Level Authentication (more secure)

    For more information about the two options, on the Remote tab, click the Help me choose link.

  4. To add the users and groups that need to connect to the RD Session Host server by using Remote Desktop, click Select Users, and then click Add.

    The users and groups that you add are added to the Remote Desktop Users group.


    Members of the local Administrators group can connect even if they are not listed.

Additional references