Connection via RDP to the server is only possible when adding a user to the "Domain Admins" group, how can I change this?

Question

Active Directory

Connection via RDP to the server is possible only when adding a user to the "Domain Admins" group.
When I try to connect, it says "The connection was denied because the user account does not have permission to log on remotely."
I want to give access to connections for my group.
In group policy settings for "Allow logon through remote desktop service" I added my group but it didn't help.
I also added a group in the remote desktop settings for the computer, it did not help.
What settings need to be changed to gain access?

Answer 1

There was no permission for remote login inside the virtual machine for a group of users; in the user Windows itself, this assignment is not so intuitively located and could not be found at first. Now everything works.

Answer 2

https://docs.microsoft.com/en-us/windows-server/re...

Answer 3

check out these places