Users & Permissions
For security reasons, you should use separate user accounts for different tasks. This guide walks you through the efficient management of local user accounts.
This guide refers to the management of Local Users and Groups. For servers acting as Active Directory Domain Controllers, management is handled via "Active Directory Users and Computers" instead.
Step 1
Open User Management
The fastest way to open the management console is via the "Run" dialog (Shortcut: Win + R).
Launch Console
lusrmgr.msc
Step 2
Create a New User
Click on Users in the left pane. Right-click in the middle window and select "New User...".
Required Fields
User name
Strong Password
Options
User must change password at next logon
Password never expires
Step 3
Assign RDP Permissions
For the user to be able to connect via Remote Desktop, they must be a member of the appropriate group:
1Right-click the new user > Properties.
2Tab "Member Of" > Add...
3Type
Remote Desktop Users and confirm everything with OK.Overview
Common Default Groups
Administrators
Full control. Use only for highly trusted administrative accounts.
Users
Standard access. Cannot make system-wide changes.
Remote Desktop...
Explicitly allows logging in via the RDP protocol.
Microsoft Documentation
Learn more about local account management on the official Microsoft portal.