RDP to your client machines for domain users?

Question

Active Directory

When you try to connect a Domain User to your computer with additional rights in the "Remote Desktop User" domain, an error occurs about insufficient rights.
I understand that on a local machine, you can manually add a group of domain users to the group of Local Remote Desktop Users, but this is not comme il faut.
How to correctly configure domain computers through GPO, so that in addition to administrators, remote desktop users can connect via RDP to domain machines?
w2k12 r2

Answer 1

The answer is in a very interesting article on Habré
Create a new policy and indicate to whom to distribute it only remains.

Answer 2

You can add users to local RDP groups of computers via GPO with targeting, if you don't want to manually. Or put everyone in the AD group "Remote Desktop Users", but this is unlikely to please you.