How to Add a User to Terminal Services RDP Permissions by Using WMI (290720)

MORE INFORMATION

To add users or groups to Terminal Services RDP permissions, use one of the following methods:

Using the GUI

1. Open Terminal Services Configuration.
2. In the Connections folder, right-click RDP-Tcp.
3. Click Properties.
4. On the Permissions tab, click Add, and then add the desired users and groups.

Using WMI in a Script

Microsoft provides programming examples for illustration only, without warranty either expressed or implied. This includes, but is not limited to, the implied warranties of merchantability or fitness for a particular purpose. This article assumes that you are familiar with the programming language that is being demonstrated and with the tools that are used to create and to debug procedures. Microsoft support engineers can help explain the functionality of a particular procedure, but they will not modify these examples to provide added functionality or construct procedures to meet your specific requirements. Create a script by using the following code sample:

set RDPObj = GetObject("winmgmts:{impersonationLevel=impersonate}!Win32_TSPermissionsSetting.TerminalName='RDP-Tcp'")
RDPobj.AddAccount "Domain\User", X
				

Where "Domain\User", X:

• Domain\User: Target Domain and Account (user or group) to which permissions are to be granted.
• X: The type of access to be granted:

  0 = WINSTATION_GUEST_ACCESS
  1 = WINSTATION_USER_ACCESS
  2 = WINSTATION_ALL_ACCESS

Using the WMI Command-Line Utility: WMIC

1. At a command prompt, type wmic. Note: If it is not in the path, add %SystemRoot%\System32\Wbem\, or change to that directory and run wmic.
2. At the wmic:root\cli> prompt, type the following command:

   PATH WIN32_TSPermissionsSetting.TerminalName="RDP-TCP" call AddAccount "Domain\user",X

   Where "Domain\User", X:
   • Domain\User: Target Domain and Account (user or group) to which permissions are to be granted.
   • X: The type of access to be granted:

     0 = WINSTATION_GUEST_ACCESS
     1 = WINSTATION_USER_ACCESS
     2 = WINSTATION_ALL_ACCESS

3. The following information is an example of the text that you will see after you run wmic and input the command:

   C:\WINDOWS\system32\wbem>wmic
   wmic:root\cli>
   wmic:root\cli> PATH WIN32_TSPermissionsSetting.TerminalName="RDP-TCP" call AddAccount "Domain\User", 2
   
   Execute (\\<ComputerName>\\root\vimv2: WIN32_TSPermissionsSetting.TerminalName="RDP-TCP")->AddAccount() (Y/N/?)
   
   Method Execution Successful.
   Out Parameters:
   instance of _PARAMETERS
   {
   RetureValue=0;
   };
   					

4. Type quit to exit the wmic prompt and to return to the command prompt.