Allow Domain Users in Server 2012 Environment
"The connection was denied because the user account is not authorized for remote login"
Slight change to allow this in Windows Server 2012 from previous versions. Open gpedit.msc and find your "Default Domain Policy", right click, edit.
Navigate:
Computer Configuration Policies Administrative Templates Windows Components Remote Desktop Services Remote Desktop Session Host Connections Allow users to connect ... ->Enabled
Now Domain Admin members can connect. If you want to add another group, you must edit:
Computer Configuration Policies Windows Settings Security Settings Restricted Groups Right click, add group, browse/select group, ok Use bottom Add, Remote Desktop Users
If you plan to connect from outside your local network, you may also need to edit
Computer Configuration Policies Windows Settings Security Settings Windows Firewall ... Windows Firewall ... Inbound Rules Right click, new rule, predefined, Remote Desktop
