Edit Group Policy

Computer Configuration > Windows Settings > Local Policies > User Rights Assignments > Allow log
on through Remote Desktop Services allow remote desktop users

Computer Configuration > Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Connections > Allow users to connect remotely by using Remote Desktop Services

Password Saving

Computer Policy > Computer Configuration > Administrative Temples > System > Credentials Delegation >Allow delegating default credentials with NTLM-only server authentication > ENABLED, show

  • TERMSRV/remote_pc — allow save for  specific computer
  • TERMSRV/*.domain.local allow saved credentials for all computers for specified domain (domain.local)
  • TERMSRV/* allow saved RDP credentials for EVERYTHING