How do I fix the connection was denied because the user is not authorized for remote login?

@michael_moshkovich Unfortunately that is not the issue. We do have a deny group, but it is empty in AD and Azure AD. I double checked, the user's account to make sure they were not part of that group, so not applicable both ways.

I also tried adding the user to the local VM's Remote Desktop Users group and suddenly they are able to sign in without issue. I have other users in the same domain who are able to sign in without being added to the Remote Desktop Users local group.

I looked at the logs and in WVDErrors and I see these 3 lines consistently for a user who fails to sign in.

TimeGenerated [UTC]

ActivityType Source Code CodeSymbolic Message ServiceError Operation
24/02/2022, 13:20:33.197 Connection Client 9,223 SSL_ERR_ACCESS_DENIED SSL_ERR_ACCESS_DENIED FALSE ClientRDPConnect
24/02/2022, 13:20:35.118 Connection RDGateway -2,147,467,259 ConnectionFailedReverseUngracefulClose The Session Host did not respond to the service attempt to gracefully terminate the connection. FALSE GatewayConnectionActive
24/02/2022, 13:21:25.772 Connection RDStack 12 NotAuthorizedForLogon This user isn't authorized so sign in to the session host. FALSE Authorization

Given that the VMs are not AzureAD domain joined, I have seen that the SSL error could be associated with users who might be AzureAD joined, so I took the precaution of enabling the PKU2U policy setting, but this also made no difference.

Any pointers appreciated.

David

  • Remove From My Forums

  • Question

  • Hi,

    any solutions I am  getting problem on remoting our terminal server. Domains and manage service account can connect but other user on the domain getting error "the connection was denied because the user account not authorized for remote login" on connecting via MSTSC.

    I already added and configure the remote settings of the server. I set to connect with less secure connection and I added the group on the list.

    I already add all users on remote desktop users.

    I am using windows server 2008r2 with RDP license of per device. I checked also the license there are slots for the connection. There is no error on the licensing.

    Thanks and Regards,

    John 

    • Moved by Monday, February 5, 2018 10:20 AM from Windows Server General forum

Answers

    • Proposed as answer by Amy Wang_ Monday, February 12, 2018 3:02 AM
    • Marked as answer by lordwhisss Monday, June 3, 2019 4:05 AM

Many times we wonder how a remote connection can be established via the internet. But technological advancement has made it possible.

In Remove connection,  a user can access another system or network remotely via the internet. Remote desktop can be used in different ways but the most common is the troubleshooting error on the target system.

Sometimes while establishing a remote connection, you might encounter an error message – “The connection was denied because the user account is not authorized for remote login”. It generally occurs when permission to access the system remotely is denied by the target host. But this is not the only case when you get this error message, sometimes when permission is granted to remotely access the system then also this message pops up. And getting such error messages along with the following listed on Windows 10 is no exception: –

1- Missing remote desktop user group

2- Add a new user to the security group

3- Check remote desktop service

Here in this post, we will learn how to fix all of them. But before that, a piece of advice. To avoid facing such problems and other common Windows errors, one should keep the system optimized. This can be done manually, but it is time-consuming and most of us don’t even know how to do it. Therefore, we suggest you use Advanced PC Cleanup the best PC cleanup and tuneup utility. Using this extraordinary tool in no time,  you can fix invalid registry entries one of the major reasons for The connection was denied because the user account is not authorized for remote login. Moreover, you can clean junk files, old downloads, detect and quarantine malware infections, and a lot more.
To give it a try, download it by clicking here. Also, you can read a comprehensive review of the product covered by us earlier.

Click Here to Download Advance PC Cleanup

How do I fix the connection was denied because the user is not authorized for remote login?

Fix: User Account Is Not Authorized For Remote Login

1. Check remote desktop user group

If your user account by which you are trying to establish a remote connection doesn’t have the Remote Desktop Users group then you might face this problem.

Therefore, follow the below-mentioned steps to ensure that your user account is a Remote Desktop Users group member.

-Type and search lusrmgr.msc in the Taskbar search box.

How do I fix the connection was denied because the user is not authorized for remote login?

-After opening it, select Users > Admin> Switch from General tab to Member Of tab.

How do I fix the connection was denied because the user is not authorized for remote login?

How do I fix the connection was denied because the user is not authorized for remote login?

– If you are unable to find the Remote Desktop Users group under the Administrator, then you need to add it.

Steps for adding: – Click the Add button> Click the Advanced on next window> Find Now button

How do I fix the connection was denied because the user is not authorized for remote login?

How do I fix the connection was denied because the user is not authorized for remote login?

-Click on Find> Select Remote Desktop Users from the list > Click OK

How do I fix the connection was denied because the user is not authorized for remote login?

2. Add User to a security group

This helps you to allow or block a user from logging on through Remote Desktop Services.

But you cannot perform this action If you do not have the correct setting.

To confirm this setting follow the below steps: –

-Type command secpol.msc in the Start search box and hit Enter.

How do I fix the connection was denied because the user is not authorized for remote login?

-Now go to Local Policies > User Rights Assignment (Double Click)> Allow log on through Remote Desktop Services (Double Click)

How do I fix the connection was denied because the user is not authorized for remote login?

How do I fix the connection was denied because the user is not authorized for remote login?

Here you will find Remote Desktop User under administrator

How do I fix the connection was denied because the user is not authorized for remote login?

Note: – If you do not find Remote Desktop User under administrator then follow the steps.

-Click on Add User or group and enter Remote Desktop User > Click OK

How do I fix the connection was denied because the user is not authorized for remote login?

How do I fix the connection was denied because the user is not authorized for remote login?

Now Restart your computer and try to establish a remote connection

3. Check remote desktop service

This is an essential element that should be running and needs to be set up correctly if not set up.

Follow the steps below: –

-Search for “services” in the Taskbar search box and open the Services Manager.

How do I fix the connection was denied because the user is not authorized for remote login?

-locate Remote Desktop Services (Double Click)> Log On > This account> Browse

How do I fix the connection was denied because the user is not authorized for remote login?

How do I fix the connection was denied because the user is not authorized for remote login?

-On the next dialogue box, click Advanced.

How do I fix the connection was denied because the user is not authorized for remote login?

-Click Find Now button to search and select NETWORK SERVICE then double click on it and save the changes.

How do I fix the connection was denied because the user is not authorized for remote login?

Now restart the system and check for the remote connection.

Conclusion:

We have discussed the major ways by which we can establish a remote connection in our system. We would recommend you try all the measures and keep your system optimized,  do try Advanced PC Cleanup.

If you have any suggestions,  then let us know in the comment box.

Next Readings:

How To Install Drivers Without Internet Connection

Does VPN Slow down the Internet? Speed Up VPN Connection

How to Increase Upload Speed on Windows 10

How do I authorize a user for remote login?

Allow Access to Use Remote Desktop Connection.
Click the Start menu from your desktop, and then click Control Panel..
Click System and Security once the Control Panel opens..
Click Allow remote access, located under the System tab..
Click Select Users, located in the Remote Desktop section of the Remote tab..

How do I fix Remote Desktop Access Denied?

How can I fix the remote connection was denied error?.
Change Remote settings. ... .
Change Local Security Policy settings. ... .
Delete local and roaming profile. ... .
Set the Remote Desktop Services logon to Network Service. ... .
Alter your registry. ... .
Recreate Domain Certificates. ... .
Create a new DWORD. ... .
Align the MaxTokenSize for the server..

How do I authorize a user for remote login server 2019?

If you cannot find Remote Desktop Users under Administrator, you need to add it. For that, click the Add User or Group button and enter Remote Desktop Users in the empty box and hit the OK button. After saving the change, restart your computer and try to connect to the host.

How do I enable remote access permission?

Click Start, point to Administrative Tools, and then click Routing and Remote Access. Double-click Your_Server_Name, and then click Remote Access Policies. Right-click Connections to Microsoft Routing and Remote Access server, and then click Properties. Click Grant remote access permission, and then click OK.