Skip to main content
To add a Remote Desktop user on Windows Server, create a local account with New-LocalUser, then add it to the Remote Desktop Users group with Add-LocalGroupMember -Group "Remote Desktop Users" -Member "alex", or in Server Manager > Local Server > Remote Desktop > Select Users. Members of Administrators can already connect. Without the Remote Desktop Services role, Windows Server allows two sessions at the same time.

Before you start

  • Sign in as an administrator with Remote Desktop.
  • Make sure Remote Desktop is turned on: Server Manager > Local Server shows Remote Desktop: Enabled, or SConfig option 7 shows it as enabled.
  • Decide whether the person needs to manage the server (add them to Administrators) or only use it (add them to Remote Desktop Users).

Who can sign in with Remote Desktop by default?

On a stand-alone Windows Server, the Allow log on through Remote Desktop Services user right is given to two groups by default: Administrators and Remote Desktop Users (Microsoft Learn). So any account in either group can connect. A normal user account that is in neither group is refused.

How to create the user and allow Remote Desktop (PowerShell)

Open PowerShell as administrator: select Start, type PowerShell, right-click Windows PowerShell and choose Run as administrator.
1

Create the account

Type a strong password when the cursor waits. It isn’t shown on screen.
2

Add it to Remote Desktop Users

To give full admin rights instead, use -Group "Administrators".
3

Check the group

The output lists WIN-SERVER\alex (your computer name before the backslash).

How to add a Remote Desktop user in Server Manager

1

Create the account (if it doesn't exist yet)

Run lusrmgr.msc, open Users, right-click and choose New User. Enter the user name and password, clear User must change password at next logon if you are setting the final password yourself, and select Create.
2

Open the Remote tab

In Server Manager, select Local Server, then click the blue Enabled link next to Remote Desktop. The Remote tab of System Properties opens (Microsoft Learn).
3

Select Users

Select Select Users, then Add.
4

Add the account

Type the user name, for example alex, select Check Names, then OK and OK again.

How to check it worked

From your own computer, open a new Remote Desktop connection to the server and sign in as alex (or WIN-SERVER\alex). If the sign-in is refused with a message that the account isn’t authorised for remote sign-in, it isn’t in either group yet. See fix Remote Desktop can’t connect for other errors.

How many users can use Remote Desktop at the same time?

Microsoft documents that Remote Desktop supports two concurrent connections for administration, with no Remote Desktop Services client access licences (RDS CALs) needed. For more than two administrative connections, or for several users working on the server at once, you must install the Remote Desktop Session Host role and have the right RDS CALs (Microsoft Learn).
Every user and device that connects to a Remote Desktop Session Host needs an RDS CAL, and the CAL version must match or be newer than your Windows Server version (Microsoft Learn). If you need multi-user Remote Desktop, open a ticket before you install the role.

How to remove Remote Desktop access

To block the account completely, disable it:

Frequently asked questions

Why can’t my new user sign in, even though the password is right?

Most often the account isn’t in Remote Desktop Users or Administrators. Check with Get-LocalGroupMember as shown above. Group changes apply at the user’s next sign-in.

Do I need to add administrators to Remote Desktop Users?

No. Members of Administrators can already sign in with Remote Desktop.

A third person can’t connect. Why?

Without the Remote Desktop Session Host role, two sessions can be active at once. A third person has to wait until one of the others signs out. Sign out properly instead of just closing the Remote Desktop window, so your session doesn’t stay open on the server.

Should each person have their own account?

Yes. Separate accounts let you see who did what in the event log and remove one person’s access without changing everyone’s password.

VPS and dedicated server guides

Every guide in this section.

Connect with Remote Desktop

Sign in from Windows, macOS or Linux.

Change the Administrator password

Set a strong password.

Change the RDP port

Move RDP off port 3389.

Fix the RDP licensing grace period error

When RDS licensing stops sign-in.

Checked against Microsoft Learn: Enable Remote Desktop, Add-LocalGroupMember, New-LocalUser, Allow log on through Remote Desktop Services and RDS CALs on 4 November 2026. Not tested on a live Windows server for this page.

Need Extra Help?

If you encounter any issues, our support team is ready to assist:

Save on Your Hosting

Ready to upgrade your hosting? Use code KB20 at checkout for 20% off your first order!

Last Updated: November 2026