如果您在尝试从运行远程桌面服务的^{(Remote Desktop Services)}Windows 服务器上的^{(Windows Server)}Windows 远程桌面^{(Windows Remote Desktop)}( RDP )客户端^(Client)计算机进行连接时收到错误消息“要远程登录，您需要有权通过远程桌面服务登录^{(To sign in remotely, you need the right to sign in through Remote Desktop Services)}” ，则此帖子旨在帮助您。在这篇文章中，我们将提供适当的解决方案，您可以尝试缓解该问题。

遇到此问题时，您将收到以下完整错误消息：

To sign in remotely, you need the right to sign in through Remote Desktop Services. By default members of the Administrators group have this right. If the group you’re in does not have the right, or if the right has been removed from the Administrators group, you need to be granted the right manually.

要远程登录，您需要通过远程桌面^{(Remote Desktop)} 服务登录的权限^(Services)

如果您遇到问题，可以在远程桌面服务^{(Remote Desktop Services)}( RDS ) Windows Server上应用下面描述的两步解决方案来解决问题。

1. 将远程桌面用户添加^{(Add Remote Desktop Users)}到远程桌面用户组^{(Remote Desktop Users Group)}
2. 允许通过远程桌面^{(Remote Desktop)} 服务登录^(Services)

让我们看一下两步解决方案中涉及的过程的描述，因为它涉及每个步骤。

1]将远程桌面用户添加^{(Add Remote Desktop Users)}到远程桌面用户组^{(Remote Desktop Users Group)}

要将远程桌面用户^{(Remote Desktop Users)}添加到远程桌面用户组^{(Remote Desktop Users Group)}，请执行以下操作：

• 打开 服务器管理器^{(Server Manager)}。
• 从 工具^(Tools) 菜单中，选择 Active Directory 用户和计算机^{(Active Directory Users and Computers)}。

如果域控制器^{(Domain Controller)}上未安装RD 会话主机服务器^{(RD Session Host Server)}，请使用本地用户和组^{(Local Users and Groups)}管理单元或系统属性中的^{(System Properties)}远程^(Remote)选项卡添加远程桌面用户。

• 双击左侧的域，然后选择 内置。^(Builtin.)
• 在右侧窗格中打开远程桌面用户 。^{(Remote Desktop Users )}
• 在 成员^(Members) 选项卡上，单击 添加^(Add)。
• 键入要授予远程^(Remote)访问RDS 服务器^{(RDS Server)}的 AD 用户。
• 单击确定。^(OK.)
• 选择远程桌面用户后，  再次单击确定关闭窗口。^(OK)

现在，您可以继续执行下面的步骤 2^{(Step 2)}来解决问题

2]允许^(Allow)通过远程桌面^{(Remote Desktop)} 服务登录^(Services)

要允许通过远程桌面服务^{(Remote Desktop Services)}登录，请执行以下操作：

• 按Windows key + R调用“运行”对话框。
• 在运行对话框中键入gpedit.msc并按 Enter打开组策略编辑器^{(open Group Policy Editor)}。
• 在本地组策略编辑器^{(Local Group Policy Editor)}中，使用左窗格导航到以下路径：

Computer Configuration > Windows Settings > Security Settings > Local Policies > User Rights Assignment

• 在右侧窗格中，双击允许通过远程桌面服务登录^{(Allow log on through Remote Desktop Services )}以编辑其属性。
• 在打开的属性页面中，单击添加用户或组^{(Add User or Group )}按钮。
• 现在，键入remote  ，然后单击 Check Names按钮。
• 从列表中选择 远程桌面用户。^{(Remote Desktop Users)}
• 全部单击“确定^{( OK)}”退出组策略编辑器^{(Group Policy Editor)}。

重新启动RDS服务器或在管理员/提升模式下打开CMD提示符并键入以下命令并按Enter以应用新的组策略设置（无需重新启动）。

gpupdate /force

一旦命令执行或RDS Windows服务器重新启动，您可以尝试从Windows 10远程桌面客户端进行连接——该问题现在应该得到解决。

如果更新组策略设置后问题仍未解决，请在^{(Group Policy)}组策略编辑器^{(Group Policy Editor)}中应用以下修改：

导航到以下路径：

Computer Configuration > Windows Settings > Security Settings > Local Policies > User Rights Assignment.

然后，打开拒绝通过远程桌面服务登录 ^{(Deny log on through Remote Desktop Services )}策略并删除 用户 ^(Users )组。

退出组策略编辑器^{(Group Policy Editor)}并运行gpupdate /force 命令。

相关阅读^{(Related read)}：远程桌面连接发生内部错误错误^{(An internal error has occurred error for Remote Desktop Connection)}。

To sign in remotely, you need to sign in through Remote Desktop Services

If you rеceive the еrror message “To sign in remotely, you need the right to sign in through Remote Desktop Services” when trying to connect from Windows Remote Desktop (RDP) Client machines on a Windows Server that is running Remote Desktop Services, then this post is intended to help you. In this post, we will provide the appropriate solution you can try to mitigate the issue.

When you encounter this issue, you’ll receive the following full error message:

To sign in remotely, you need the right to sign in through Remote Desktop Services. By default members of the Administrators group have this right. If the group you’re in does not have the right, or if the right has been removed from the Administrators group, you need to be granted the right manually.

To sign in remotely, you need the right to sign in through Remote Desktop Services

If you’re faced with the issue, you can apply the 2-step solution described below on the Remote Desktop Services (RDS) Windows Server to resolve the issue.

1. Add Remote Desktop Users to the Remote Desktop Users Group
2. Allow the log on through Remote Desktop Services

Let’s take a look at the description of the process involved in the 2-step solution as it concerns each step.

1] Add Remote Desktop Users to the Remote Desktop Users Group

To add Remote Desktop Users to the Remote Desktop Users Group, do the following:

• Open Server Manager.
• From Tools menu, select Active Directory Users and Computers.

If the RD Session Host Server is not installed on the Domain Controller, use the Local Users and Groups snap-in or the Remote tab in the System Properties, to add the Remote Desktop Users.

• Double click at your domain on the left and then select Builtin.
• Open Remote Desktop Users on the right pane.
• At Members tab, click Add.
• Type the AD users that you want to give Remote access to the RDS Server.
• Click OK.
• After selecting the remote desktop users, click OK again to close the window.

Now, you can proceed with Step 2 below to resolve the issue

2] Allow the log on through Remote Desktop Services

To allow the log on through Remote Desktop Services, do the following:

• Press Windows key + R to invoke the Run dialog.
• In the Run dialog box type gpedit.msc and hit Enter to open Group Policy Editor.
• Inside the Local Group Policy Editor, use the left pane to navigate to the path below:

Computer Configuration > Windows Settings > Security Settings > Local Policies > User Rights Assignment

• At the right pane, double-click on Allow log on through Remote Desktop Services to edit its properties.
• In the properties page that opens, click Add User or Group button.
• Now, type remote and then click Check Names button.
• Select the Remote Desktop Users from the list.
• Click OK all through to exit Group Policy Editor.

Restart the RDS server or just open CMD prompt in admin/elevated mode and type the command below and hit Enter to apply the new group policy settings (without restart).

gpupdate /force

Once the command executes or the RDS Windows server reboots, you can try to connect from the Windows 10 remote desktop client – the issue should be resolved now.

If after updating the Group Policy settings, the problem is not resolved, apply the following modification at Group Policy Editor:

Navigate to the following path below:

Computer Configuration > Windows Settings > Security Settings > Local Policies > User Rights Assignment.

Then, open the Deny log on through Remote Desktop Services policy and remove the Users group.

Exit Group Policy Editor and run the gpupdate /force command.

Related read: An internal error has occurred error for Remote Desktop Connection.

Related posts

• Remote Desktop Services在Windows 10中导致High CPU

• 增加Windows 11/10中Remote Desktop Connections的数量

• Windows按Remote Desktop session切换后卡住钥匙

• 在Windows 10中无法在Remote Desktop Session中复制Paste

• RDP connection authentication error;请求的Function不受支持

• Remote Desktop Connection错误发生了内部错误

• Connect Android至Windows 10使用Microsoft Remote Desktop

• Fix Remote Desktop在Windows 11/10中找不到computer error

• Connect iPhone至Windows 10 PC使用Microsoft Remote Desktop

• logon attempt在连接Remote Desktop时出现错误失败

• 简单问题：什么是远程桌面连接？

• Windows 10 Best Free Remote Desktop Software

• Command Line Parameters用于Remote Desktop Connections

• RDWEB中RDWEB中缺少Edge browser Edge browser Remote Desktop tab

• 如何阻止您的Windows PC上的Remote Desktop

• Fix Remote Desktop connection Windows 10上的问题和错误

• 使用Chrome Remote Desktop远程访问您的Computer

• 如何在 Windows 10 上使用远程桌面应用程序

• RDP connection断开，当你在Remote Desktop启用声音

• Ammyy Admin：便携式Secure Zero-Config Remote Desktop Software