Skip to main content

How to create a user for RDP access on Windows Server

Creating separate accounts prevents administrative user sharing and makes it easier to remove access when it is no longer needed.

1. Open Computer Management​

  1. right-click on the Start menu;
  2. select Computer Management;
  3. open Local Users and Groups;
  4. click Users.

On a server that participates in a domain, account administration may follow different policies.

2. Create local user​

  1. right click on the list;
  2. choose New User;
  3. enter your username and full name;
  4. set a strong password;
  5. choose expiration options according to your policy;
  6. click Create.

Avoid generic shared names, such as user1 or admin2.

3. Grant Remote Desktop access​

  1. open user properties;
  2. access Member of;
  3. click Add;
  4. inform the local Remote Desktop user group;
  5. confirm membership.

The name displayed by the group varies depending on the Windows Server language.

4. Confirm that RDP is enabled​

Open Settings > System > Remote Desktop and confirm that access is active.

See the Microsoft reference on enable Remote Desktop.

5. Test the new account​

On another computer, open:

mstsc

Enter the VPS IP and the new user. Do not close your administrative session until you confirm that the login works.

6. Apply the principle of least privilege​

The RDP user group allows you to sign in remotely, but does not automatically grant administrative privileges.

Add the account to the Administrators group only when it really needs to change system settings.

7. Deactivate an account without deleting it​

When access is no longer required:

  1. open user properties;
  2. check Account deactivated;
  3. close sessions that are still open;
  4. Review the files and permissions belonging to the account.

Disabling first is more reversible than deleting immediately.

Frequently asked questions​

How many users can use RDP at the same time?​

The amount and type of usage depends on the Windows Server edition, configuration, and licensing. For use beyond permitted administrative sessions, check Remote Desktop Services licensing.

Does the user need to be an administrator?​

No. For common tasks, grant RDP access only. Elevate privileges only when necessary.

Can I share an account between technicians?​

It is not recommended. Individual accounts improve traceability and access revocation.

Does the account receive access to other users' files?​

Not automatically. Access depends on NTFS permissions and assigned groups.

If you need help, open a ticket with Nice Hosting support.