A couple of things to set for getting Remote Desktop access to a server for a domain user:
If you need Allow logon through Terminal Service, then there is a shortcut to add users on the server to the local group Remote Desktop Users:
- Right-Click your server – Properties – Remote – Select Remote Users – Add the user
Above requires Remote Desktop Users to have permission in:
- Admin Tools – Local Security Settings\Local Policies\User Rights Assingment – Allow log on through Terminal Services
- Also Administrators should have this permission
Ensure that the user is not denied through
- Admin Tools – Local Security Settings\Local Policies\User Rights Assingment – Deny log on through Terminal Services
If you need Terminal Server User Access, then on the server go to:
- Admin Tools – TS Configuration\Connections
- Select connection – Properties – Permissions
- Add local group Remote Desktop Users – Allow User Access and Guest Access.
- Make suer that Everyone is not denied
Disable loopback check
There might be some local web sites that you want to access using Remote Desktop, but won’t let you authenticate with your valid password. It writes An account failed to log on (status: 0xc000006d, eventid: 4625) in the security eventlog.
This could be due to due to loopback check. The fix is to disable that check: