Windows Instance: No Remote Desktop Services Log-in Permission

Problem Description

When you use Windows Remote Desktop to connect to a Windows instance, the following prompt appears:
To log in remotely, you need permission to log in through Remote Desktop Services. By default, members of the Remote Desktop Users group have this permission. If the group you belong to does not have this permission, or if the permission has been removed from the Remote Desktop Users group, you need to be granted this permission manually.

Solution

1. Log in to the CVM console.
2. On the CVM page, select the CVM instance with the connection exception and click Log In.
3. In the Log in to Windows Cloud Server window that pops up, select Log in via Browser VNC and click Log In Now.
4. In the log-in window that pops up, select Send Remote Command in the upper left corner and click Ctrl-Alt-Delete to enter the system log-in interface.
5. In the operating system interface, select Start > Run and enter gpedit.msc.
6. Press Enter to open the Local Group Policy Editor.
7. In the left sidebar, select Computer Configuration > Windows Settings > Security Settings > Local Policies > User Rights Assignment.
8. In the right policy list, double-click to open the properties of the Deny Log-in Through the Remote Desktop Services policy.
9. In the Deny Log-in Through Remote Desktop Services Properties window, check whether the account that needs to log in is in the list of users denied log in through Remote Desktop Services.
   • If yes, remove the account that needs to log in from the list.
   • No, please report to the maintenance engineer.