question

MatheusPD-2477 avatar image
0 Votes"
MatheusPD-2477 asked MatheusPD-2477 commented

Block users to access RDS - Windows Server 2016

I have a Windows Server 2016 with 6 RDS licenses per user. It is not a domain controller.

I realized that, other users accidentally accessed the RDP server and consumed the license, is it possible to block everyone's access and allow only the 6 users that I designate or allow a specific group with these 6 users? (I will have to wait 90 days for it to be possible to revoke the license of people who accidentally accessed the server.)

Thank you in advance.

remote-desktop-services
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

AndriyBilous avatar image
0 Votes"
AndriyBilous answered AndriyBilous commented

Hello @MatheusPD-2477
Yes, you can restrict access to your RDS server.
Login into RDS server itself > Windows Key+R > systm.cpl > Remote > Remote Desktop > Select Users > Add as appropriate.
80224-image.png


If you have RDS Session Collection please specify appropriate User Group that should have access to your RDS server
https://docs.microsoft.com/en-us/windows-server/remote/remote-desktop-services/rds-user-management
80166-image.png



image.png (104.8 KiB)
image.png (17.3 KiB)
· 3
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi Andriy tks for the tips.

I followed the guidance of the "RDS Session Collection" and it worked, the user who does not have access has actually been restricted.

However, I encountered another problem. This user who tried to access and was restricted appeared in my "RD Licensing Manager", reserving a license for two months.

This is worrying to me, if a user tries to access the server by mistake, he can reserve a license from another user who needs this access.

Do you know how I can restrict this?

0 Votes 0 ·
KarlieWeng-MSFT avatar image
0 Votes"
KarlieWeng-MSFT answered MatheusPD-2477 commented

Hello @@MatheusPD-2477

You may also change the Remote Desktop Users Group members from everyone to user you want.

Computer Management> Groups > double click Remote Desktop Users Group> add user to this group.

If you add everyone which means all connecting sessions will be admitted.

80448-image.png


Best Regards
Karlie


If the Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


image.png (92.4 KiB)
· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Could you please assist with an issue "his user who tried to access and was restricted appeared in my "RD Licensing Manager", reserving a license for two months."

https://social.technet.microsoft.com/Forums/en-US/2b30dd2d-3e61-4ca0-9aea-87acd8ad7398/rds-2016-user-cal-license-issued-although-user-has-no-access-rights-to-the-server?forum=winserverTS

0 Votes 0 ·

@AndriyBilous It is exactly my case, but there was no resolution.

A user receives this message:

The connection was denied because the user's account is not authorized for remote login

But although the user receives the error message, a USER CAL is issued to the disallowed user

0 Votes 0 ·