How to Add Multiple Users to a Windows RDP Server

You can give other people their own login on a Windows RDP server, so that each person has a separate desktop and settings instead of sharing the Administrator account. This guide shows how to create users, allow them to connect and control what they can do. Read the licensing overview first, because the number of people who can connect at the same time depends on it.

Step 1: create a user

Connect as Administrator and open PowerShell as administrator:

$pw = Read-Host -AsSecureString "Password"
New-LocalUser -Name "alex" -Password $pw -FullName "Alex" -PasswordNeverExpires

Use a strong, unique password for each person.

Step 2: allow remote login

Add the user to the Remote Desktop Users group. Do not add them to Administrators unless they need full control.

Add-LocalGroupMember -Group "Remote Desktop Users" -Member "alex"
Get-LocalGroupMember -Group "Remote Desktop Users"

Step 3: check that the firewall allows RDP

Get-NetFirewallRule -DisplayGroup "Remote Desktop" | Select DisplayName, Enabled

If you changed the RDP port or limited it by address, make sure the new user's address is allowed.

Step 4: give each user only what they need

• Install shared software for all users, and put personal files in each user's own profile.
• Use NTFS permissions to restrict shared folders.
• Remove users when they leave: Remove-LocalUser -Name "alex".

Step 5: manage sessions

query user
logoff 3            # log off session ID 3
Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Control\Terminal Server" -Name fDenyTSConnections -Value 0

If two people try to use the same account at once, the second connection may disconnect the first. Separate accounts avoid that.

Limits to know

• The number of simultaneous sessions is limited by the Windows licence. See RDP licensing explained.
• Several active desktops share one server's CPU and RAM, so size it for the total. Check the specs on our plans.

Keep it safe

More users means more passwords and more risk. Require strong passwords, keep Network Level Authentication on, limit the allowed IP addresses where you can and review the user list now and then. See securing your Windows RDP server.