Would you like to see the site in a different language?
TSPLUS BLOG
This guide explains how administrators can verify which users have Remote Desktop Protocol (RDP) permissions on a Windows server and who is currently connected. We’ll walk through built-in Windows tools and show how TSplus Remote Access simplifies user and session management with a central console.
)
As a network administrator, some days will go smoothly. Other days, your infrastructure’s components, devices and apps, the number of staff and users accessing it, and any other variable that might weigh in and multiply potentials, all come together for something quirky to happen.
Ensuring stable secure access to your servers is an ongoing task. It is also multi-faceted. Among your daily responsibilities, checking who has RDP access is essential for both security reasons and operational control. Below, we explain how to perform these checks in Windows and then compare it with the faster and centralised approach in TSplus Remote Access.
Admins create users either locally or through Active Directory. Proper group assignments determine which individuals can connect remotely.
Users must be part of the Remote Desktop Users group or be administrators with the appropriate rights. These permissions ensure secure but functional access.
Access permissions can become outdated as staff change roles. Routine audits help prevent unauthorized connections and improve compliance with security policies.
Managing RDP access can sometimes lead to unexpected issues:
Recognizing these pitfalls helps administrators design better auditing routines and avoid misconfigurations that could compromise security .
Time to get down to business. Start by accessing the device’s local “Computer Management” via a right click on the start menu. In that window, you can scroll down the side menu within System Tools . Expand Local Users and Groups and click to access the Groups list. Here, you should find all the information you need. You can also see the same information in “Task Manager”.
Here are the steps breakdown in list form followed by a description of explicit and implicit authorisations and a note on manual checks.
)
)
Get-LocalGroupMember -Group "Remote Desktop Users"Show current sessions (RDS/host) with cmd:
query user
query session
These commands report user, session ID, and state (Active/Disconnected).
In the group Remote Desktop Users , those users listed will have been allocated access privileges. Administrators On the other hand, each should by default have access to a device. Bear in mind that administrators may not automatically be listed in their group. They will nonetheless normally be granted default access. In short:
On large networks, repeating this process across multiple servers is time-consuming. Active Directory nesting can also obscure visibility of actual RDP permissions.
For reference, Microsoft provides detailed instructions on enabling and checking Remote Desktop access in its documentation .
Windows built-in tools are reliable for basic checks, but they are rapidly time-consuming and fragmented. Each server requires manual verification, and permissions may be scattered across nested groups in Active Directory. This makes it difficult to maintain a clear overview in larger environments or multi-server infrastructures.
For administrators who need centralised visibility and easier control, dedicated remote access software is often a better option. TSplus Remote Access provides you with a complete management console for all your Application publishing and web-enabling Moreover, it includes your user profiles and presence management, and even your farm management, amongst other things.
TSplus consolidates RDP access management and application publication into a single interface. With it, you can:
Compared to traditional Remote Desktop Services (RDS), TSplus removes unnecessary complexity and licensing overhead. It gives IT teams an affordable, streamlined and secure way to manage RDP access across an entire organization.
To perform the above checks when using TSplus Remote Access, you can look in the same places as above for the device-based information. Here is how you would find that information and more in our environment:
With TSplus, you can manage a host of user-related assignments in either display & interaction mode available for our Console: the Publish & Assign Applications pane (Lite) or the Applications pane (Expert). This makes it easy to confirm which users or groups have permission to log in and use published apps.
Assigning Applications to Users or Groups → Centralized User Assignment There you can select a user to view related information.
)
Assigning Applications to Users or Groups → Centralized User Assignment → Users submenu. With this view, select a specific application to verify which users can access it.
)
Open the Session Manager to see all current sessions across servers. From here, you can disconnect, log off or monitor activity, without logging into each server separately.
In the Admin Console, click on the Session Manager button to view a list of users.
The Session Manager displays all active and disconnected sessions in real time. For each user, you can:
)
When you request one, the user will be prompted thus:
)
Within Sessions → Permissions administrators can control clipboard use, printer redirection, or drive access. Combined with TSplus Advanced Security, this approach helps mitigate risks like brute-force attacks and unauthorized access.
)
)
You can enforce session limits, prevent multiple concurrent sessions per user, and configure automatic reconnection rules for smoother workflows.
This feature pre-loads sessions before working hours, reducing logon delays. Employees start work instantly without waiting for session initialization.
TSplus includes a secure HTML5 Web Portal for browser-based access. Administrators can restrict logins to the portal, preventing direct RDP connections and reducing the attack surface. The Sessions → Permissions route above also leads to the Web Portal Access Restrictions menu. You can choose between the following actions: No Restriction , Mandatory , Admins only or Prohibit Admins .
)
Microsoft’s Remote Desktop Services (RDS) delivers remote applications and desktops but requires multiple roles to function: Session Host, Gateway, Broker and Web Access. Added to the rapid fallback on Citrix, this makes RDS powerful but also complex to configure, costly to license, and resource-intensive to maintain at scale.
For many organizations, a lighter yet secure solution is preferable. TSplus Remote Access provides that alternative. Instead of juggling multiple RDS roles, administrators get:
This makes TSplus an appealing choice for organisations seeking cost savings, reduced complexity and stronger security, all while still delivering smooth remote sessions.
These are some simple checks to perform, whether within Windows or in Remote Access. At any time, monitoring who has RDP access to your servers proves a critical part of maintaining security and efficiency. Whether using Windows’ built-in tools or simplifying management with TSplus Remote Access, regular checks ensure only authorized users connect, reducing risks and keeping your IT environment secure and well-controlled.
With a few clicks you can set up our software to discover its simplicity and ease of use thanks to our 15-day free trial period. Finally, a quick look at our store will give your finance manager the assurance that this is a remote solution which will not break the bank.
TSplus Remote Access Free Trial
Ultimate Citrix/RDS alternative for desktop/app access. Secure, cost-effective, on-premise/cloud
Your TSplus Team
One-Click Remote Access
The ideal alternative to Citrix and Microsoft RDS for remote desktop access and Windows application delivery.
Try it for freeTRUSTED BY 500,000+ COMPANIES
Related Posts
)
Discover how Software as a Service (SaaS) is transforming business operations. Learn about its benefits, common use cases, and how TSplus Remote Access aligns with SaaS principles to enhance remote work solutions.
)
Learn how to install Citrix Workspace with our step-by-step guide, plus discover why TSplus is a simpler, cost-effective alternative for secure remote desktop access.
)
Re-discover step-by-step methods to completely uninstall Citrix Workspace or Receiver from Windows, macOS and Linux systems, ensuring no residual files remain.
)
This article is designed for IT professionals looking to implement the HTML5 RDP client on Windows Server, offering detailed instructions, strategic insights, and best practices to ensure a robust deployment.
