Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Expand
titleWindows (10, 11, Server) on-domain


Expand
titleAdd RDP (Remote Desktop) access


Expand
titleCommand Line

1) On the remote computer, right-click on the start menu and click "Windows PowerShell (Admin)"


2) Copy in the following command, substituting in the user's Netid

Code Block
languagepowershell
Add-LocalGroupMember -Group "Remote Desktop Users" -Member "AD\<netid>"


Expand
titleProvide Administrator rights to a user

Please submit a request to ischoolit@ot.syr.edu with the user's netid and we can configure this for you



Expand
titleGUI

1) Click on the "Start" menu and then the gear icon in the left-hand menu, then open the "Settings" panel


2) In the search bar, type "Remote Desktop" and then click on the "Remote Desktop Settings" search result


3) In the "Remote Desktop" settings, first make sure the "Enable Remote Desktop" option is enabled. Then, click "Select users that can remotely access this PC"'


4) Click "Add" on the "Remote Desktop Users" window (1). Ensure the "Location" is set to "ad.syr.edu"(2), and then type the netid of the user (3)


5) Click "OK".



Expand
titleProvide Administrator rights to a user

At this time, please submit a request to ischoolit@ot.syr.edu and we can configure this for you





Expand
titleWindows (10, 11, Server) off-domain


Expand
titleCreate a local user account


Expand
titleCommand Line

1) On the remote computer, right-click on the start menu and click "Windows PowerShell (Admin)"


2) Copy in the following commands line by line, substituting in the user's Netid or "L-netid" to create an admin account (examples below)

Standard user:

Code Block
languagepowershell
$Password = Read-Host -AsSecureString

New-LocalUser -Name "<netid>" -FullName "Firstname Lastname" -Description "Standard user account for <netid> -Password $Password


Admin user:

Code Block
languagepowershell
$Password = Read-Host -AsSecureString

New-LocalUser -Name "<netid>" -FullName "Firstname Lastname" -Description "Admin user account for <netid> -Password $Password



Expand
titleGUI

1) Click on the "Start" menu and then the gear icon in the left-hand menu, then open the "Settings" panel


2) Click on "Accounts" in the settings menu


3) Click on "Other users"


4) Click on "Add someone else to this PC"


5) Double-click into the "Users" location


6) Fill in the user's information, as shown below, using a temporary password and click "Create" when finished. To create an admin account, use the prefix "L-" before the netid (second image)



Expand
titleAdd RDP (Remote Desktop) access


Note

NOTE: Only standard (non-administrator) accounts should be allowed interactive login privileges!


Expand
titleCommand Line

1) On the remote computer, right-click on the start menu and click "Windows PowerShell (Admin)"


2) Paste in the following command, substituting the local account name

Code Block
languagepowershell
Add-LocalGroupMember -Group "Remote Desktop Users" -Member "<netid>"



Expand
titleGUI

1) From within the "lusrmgr" menu (Step #5 in the previous section), click into the "Groups" location in the tree and then double-click to open the "Remote Desktop Users" group


2) You'll see the users who currently have RDP access. Click "Add"


3) Type the user account in the "object name" box and click "OK"



Expand
titleProvide Administrator rights to a user


Note

A separate "l-netid" account should be created for this purpose, and the admin account cannot be provided direct remote desktop access


Expand
titleCommand Line

1) On the remote computer, right-click on the start menu and click "Windows PowerShell (Admin)"


2) Paste in the following command, substituting the "L-<netid>" account name

Code Block
languagepowershell
Add-LocalGroupMember -Group "Administrators" -Member "L-<netid>"




1) Follow the "account-creation" steps above to create a new local user account ("l-netid")


2) From within the "lusrmgr" menu (Step #5 in the account creation guide), click into the "Groups" location in the tree and then double-click into the "Administrators" group


3) Type the "L-" user account in the "object name" box and click "OK"


...