I followed a guide that really messed up my Remote Desktop Protocol (RDP) settings. I tried to revert my changes, but now the super admin can no longer remote into my main server or domain controller. I usually log into my servers using , but now when I connect as the Administrator, instead of just seeing the usual username, it shows 'Unlock the PC.' After about 10-20 seconds, I get a timeout error saying 'Logon failure: the user has not been granted the requested logon type at this computer.' I can't figure out how the super admin lost these privileges, especially since I can still access my data server fine with the same credentials. The guide I used is linked here for reference: [The infuriating guide](https://medium.com/@basharraed/enabling-remote-desktop-in-active-directory-322d38209814).
4 Answers
You should really avoid using .Administrator for your connections since it’s a prime target for cyber attacks. Instead, consider disabling the Administrator account completely or using Local Administrator Password Solution (LAPS) if you haven't implemented it yet. Create separate privileged accounts for admin tasks and make sure to audit them for better security.
It sounds like a policy was set that restricts interactive logons for the Administrator account. While the built-in domain admin account typically has special privileges, it can still be subjected to some restrictions. It's a good security move to limit its use; ideally, you should have a dedicated admin account for daily tasks instead of relying on DOMAINadministrator.
Make sure you’re using the right format for login. Try connecting with PC_nameadministrator instead of just the domain format. This sometimes helps clear up connection issues.
I had the same issue and found that it was due to local user groups not having the right permissions to access C: after an upgrade. Although I didn’t do an upgrade recently, something might have changed with your group policy settings for RDP, which could be affecting user access.
Related Questions
Can't Load PhpMyadmin On After Server Update
Redirect www to non-www in Apache Conf
How To Check If Your SSL Cert Is SHA 1
Windows TrackPad Gestures