This question seems fairly simple but still has me scratching my head.
I am wondering what the purpose is for the “Remote Desktop Users” domain local group that resides in the BuiltIn container that comes in any domain by default.
The description is:
Members in this group are granted the right to logon remotely.
You would think that any domain user member of this group could establish a Remote Desktop session to any domain member computer except for domain controllers (since you need to be a domain admin to connect to DCs). However, I have tested with users who are domain members and also members of this group. They continue to get rejected until they are added to the Remote Desktop Users local group which resides on the server they you are trying to connect to. The domain local Remote Desktop Users group seems to have no affect that I can determine.
Does anyone know what the purpose of the “Remote Desktop Users” group is?
Thanks