Connection to a Windows CVM through Remote Desktop was denied

Last updated: 2020-05-08 10:47:52

    Problems

    Problem 1

    When trying to connect to a Windows instance by using Windows Remote Desktop, you are prompted with the message stating "The connection was denied because the user account is not authorized for remote login."

    Problem 2

    When trying to connect to a Windows instance by using Windows Remote Desktop, you are prompted with the message stating "To sign in remotely, you need the permission to sign in through Remote Desktop Services. By default members of the Remote Desktop Users group have this permission. If the group you’re in doesn’t have the permission, or if the permission has been removed from the Remote Desktop Users group, you need to be granted the permission manually."

    Problem Analysis

    The user is not allowed to log in to the Windows instance through Remote Desktop connections:

    Solution

    • If you encounter problem 1 when trying to connect to a Windows instance through Remote Desktop, you need to add the user account to the list of accounts that are permitted by the Windows instance to log in through Remote Desktop Services. For details, see Configuring the permission that allows remote login.
    • If you encounter problem 2 when trying to connect to a Windows instance through Remote Desktop, you need to remove the user account from the list of accounts that are denied by the Windows instance to log in through Remote Desktop Services. For details, see Configuring the permission that denies remote login.

    Directions

    Logging in to the CVM by using VNC

    1. Log in to the CVM console.
    2. On the instance management page, find the target CVM and click Log In, as shown in the following figure:
      CVM list page
    3. In the "Log In to Windows Instance" window, select "Alternative login methods (VNC)" and click Log In Now to log in to the CVM.
    4. In the login window that appears, select Send Ctrl-Alt-Delete in the upper-left corner, and click Ctrl-Alt-Delete to enter the system login interface, as shown in the following figure:

    Configuring the permission that allows remote login

    The following operations take Windows Server 2016 as an example.

    1. On the operating system interface, click , enter gpedit.msc, and press Enter to open "Local Group Policy Editor".
    2. In the left navigation tree, choose Computer Configuration > Windows Settings > Security Settings > Local Policies > User Rights Assignment, and double-click Allow log in through Remote Desktop Services.
    3. In the "Allow log on through Remote Desktop Services Properties" window, check whether the user account you want to use for remote login is in the user list of "Allow log in through Remote Desktop Services".
    4. Click Add User or Group to go to the "Select User or Group" window.
    5. Enter the account that you want to use for remote login and click OK.
    6. Click OK and close Local Group Policy Editor.
    7. Restart the instance and try to connect to the Windows instance with the account through Remote Desktop again.

    Configuring the permission that denies remote login

    The following operations take Windows Server 2016 as an example.

    1. On the operating system interface, click , enter gpedit.msc, and press Enter to open "Local Group Policy Editor".
    2. In the left navigation tree, choose Computer Configuration > Windows Settings > Security Settings > Local Policies > User Rights Assignment, and double-click Deny log in through Remote Desktop Services.
    3. In the "Properties" window, check whether the account you want to use for remote login is in the user list of "Deny log in through Remote Desktop Services".
      • If the user is in the list, remove the user account from the list and restart the instance.
      • If the user is not in the list, submit a ticket.

    Was this page helpful?

    Was this page helpful?

    • Not at all
    • Not very helpful
    • Somewhat helpful
    • Very helpful
    • Extremely helpful
    Send Feedback
    Help