search

stascorp / rdpwrap

RDP Wrapper Library
Apache License 2.0
14.43k stars 3.8k forks source link

Windows 10 Home: Unable to connect as non admin #107

Closed philippseith closed 8 years ago

philippseith commented 8 years ago

I removed my personal user from ther administrators group and, because there is no group for remote desktop users on Win 10 Home, granted the right to for remote login to the user using gpedit.msc. I can remotely reach the login screen of the Win10 Home, but if I login as user, I am getting "The requested session access is denied" In the eventviewer on Home a crash of dwm.exe is reported. Sometimes it fails in combase.dll, sometimes in kernelbase.dll. The crash seems to occur shortly after the "access denied" was acknowledged.

binarymaster commented 8 years ago

See README.md: Adding "Remote Desktop Users" group.

fm99 commented 8 years ago

Hi Stas'M, You've just closed the issue with reference to README.md - which in turn just contains a reference to post 680572 on superuser.com. There are two different answers posted there: http://superuser.com/a/719819 and http://superuser.com/a/680573 . Which one is the correct solution that allows non-admin users to use RDP on a Win 10 Home machine?

binarymaster commented 8 years ago

Try first one

fm99 commented 8 years ago

Hi again, In brief, it doesn't work: I've created a REG file as per the 1st answer (http://superuser.com/a/719819) and imported it under the System account using the PSexec tool method described in the 2nd answer (http://superuser.com/a/680573). The import was successful. After a reboot when trying to login with a non-admin user I still get this error: "To sign in remotely, you need the right to sign in through Remote Desktop Services. By default, members [...]". Am I missing something?

fm99 commented 8 years ago

Ok, I have found the missing bit: The non-admin user must be added to the local "Remote Desktop Users" group (as mentioned in the 2nd answer). I.e. running cmd.exe as administrator I entered: net localgroup "Remote Desktop Users" MyNonAdminUser /add And bingo! Now I can sign in to my Win 10 Home machine with a non-admin user.

Summary

  1. Created a REG file as per http://superuser.com/a/719819
  2. Download PSTools.zip (https://download.sysinternals.com/files/PSTools.zip) and extract PsExec.exe (Run cmd.exe as administrator for the next two steps.)
  3. PsExec.exe -s -i regedit.exe ( => now import the REG file as System user)
  4. net localgroup "Remote Desktop Users" MyNonAdminUser /add
binarymaster commented 8 years ago

Good! :)