Intune Autopilot: Troubleshoot RDP access prompt

So I am testing Autopilot in my lab environment, consist a Hyper-V with its Virtual Machines. Well I am doing a manual registration, so how do I export the device information that is required my VM to be register for Autopilot?

I already have a VM running Windows 10 Pro, and I ran this script to export and automatic import the device information to be register into autopilot. However, I wasn’t running the script before Out-of-the-box-experience (OOBE) happen, so to make Autopilot work on my VM, I had to reset my VM.

Once the VM has reset,  it ask for region, language of my keyboard and next it shows a welcome page with the Display name and the company name. So I key in the email address and password of the user and also setup the PIN. However, I just notice that I set this user with the Standard permission only. Thus, the administrator account is disabled and I keep getting the RDP permission error prompt due to the user account is not in the RDP group in the VM.

Example of the prompt;

To sign in remotely, you need the right to sign in through Remote Desktop Services. By default, members of the Remote Desktop Users group have this right. If the group you’re in doesn’t have this right, or if the right has been removed from the Remote Desktop Users group, you need to be granted the right manually.

How I troubleshoot this;

1. Is to run MMC as administrator > File > Add/Remove Snap-in
   • 
2. Key in your Office 365 admin account (an account with permission that can manage device)
3. Select Local Users and Groups > Add
   • 
4. Select Local computer > Finish > Ok
5. Expand the local users and groups > Users > Right click Administrator  > Uncheck Account is disabled
   • 
   • 
6. Reset the local Administrator password too
7. Select Groups > Right click on the remote desktop users > Add > Authenticated users > Ok
   • 
8. Close MMC
9. Sign out and Sign in again

These steps should help you from getting the prompt again.

Please take note that I am doing this in Lab environment. In production, by right not to enabled administrator account and not to do any changes to the local users and groups. 

Author: sabrinaksy

Just an ordinary lady who love what she does best. View all posts by sabrinaksy