I have been searching and searching for a batch file or script that I can run at startup or runonce that will enable Remote Desktop and also add only a specific user/group that will have the remote desktop ability, so if anyone has some info on this matter I would greatly appreciate it.

V/R,

Studmuffinbob

What you first should look for is the registry changes required to enable remote desktop.

Put them into a .reg file.

Then look up how to apply a .reg file via a batch file.

Both are quite easy to lookup on google.

Enable remote desktop:

strComputer = "."
set objWMI = GetObject("winmgmts:\\" & strComputer & "\root\cimv2")set colItems = objWMI.ExecQuery("Select * from Win32_TerminalServiceSetting")

for each objItem in colItems
	 intRC = objItem.SetAllowTSConnections(true)
	 if intRC then
		 WScript.Echo "Error enabling Remote Desktop"
	 end if
next

You don't say if you want to add a local user/group or and AD user/group which is slightly different.

Don't forget to turn on the firewall exception for remote desktop also. And make sure that the No exceptions allowed box is not checked.

If you are using an unattended install file you can add the following to it

[TerminalServices]

AllowConnections=1 

If your using a Active Directory domain you can make a group policy that specifies each user or group that is allowed.

Edited June 3, 200818 yr by pierce14u2

I am using Active Directory domain, and I only want one group to be able to remote into the machines. I am also trying to make this work with an Unattended Windows server 2003 installation. Thank you for all the responses I really appreciate it.

V/R,

Studmuffinbob

the easiest way then would likely be to use the net command.

net localgroup "Remote Desktop Users" "domain\My TS Users" /add

replace domain with your domain name and "my ts users" to your group name.