Elastic Compute Service:Enable multiple users to log on to a Windows ECS instance

Overview

This topic describes how to enable multiple users to simultaneously log on to a Windows Elastic Compute Service (ECS) instance.

Background information

Take note of the following items:

• Before you perform high-risk operations such as modifying instance configurations or data, we recommend that you check the disaster recovery and fault tolerance capabilities of the instances to ensure data security.
• You can modify the configurations and data of instances including ECS and ApsaraDB RDS instances. We recommend that you create snapshots or enable RDS log backup before you modify instance configurations or data.
• If you have authorized or submitted sensitive information such as the logon account and password in the Alibaba Cloud Management Console, we recommend that you modify the information in a timely manner.

Install Remote Desktop Session Host and Remote Desktop Licensing

1. Log on to a Windows ECS instance. For more information, see Overview.
2. In this topic, Windows Server 2012 R2 Datacenter Edition 64-bit is used. In the lower-left corner of the Windows desktop, click the Server Manager icon. Then, click Add roles and features.
   
3. In the Select installation type step of Add Role and Feature Wizard, select Role-based or feature-based installation and click Next. In the Select destination server step, select Select a server from the server pool and click Next. In the Select server roles step, select Remote Desktop Service and click Next.
   
4. Click Next twice.
5. In the Role Services step, select Remote Desktop Session Host and Remote Desktop Licensing. In the dialog box that appears, click Add Features. Then, click Next.
6. Confirm the selected roles and click Install.
7. After the roles are installed, restart the instance as prompted.

Enable multiple users to log on to a Windows instance

1. In the Run dialog box, enter gpedit.msc and click OK to start Local Group Policy Editor.
   
2. Choose Computer Configuration > Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Connections. Set Allow user to connect remotely by using Remote Desktop Services, Limit number of connections (based on actual requirements), and Restrict Remote Desktop Services users to a single Remote Desktop Services session.
   
3. Double-click Allow user to connect remotely by using Remote Desktop Services and select Enabled. Click Apply and then click OK.

   Note: You can view the policy configurations in the Help section.

4. Double-click Limit number of connections and select Enabled. Click Apply and then click OK.
5. Double-click Restrict Remote Desktop Services users to a single Remote Desktop Services session and select Enabled or Disabled. Take note of the differences between Enabled and Disabled. In this example, select Enabled. Click Apply and then click OK.

Add new users to the remote desktop users group

After multiple users are enabled to log on to an ECS instance, add new users to the remote desktop users group.

1. Create user accounts:
   1. Log on to the Windows ECS instance.
   2. In the lower-left corner of the Windows desktop, click the Start icon, click Control Panel, and then click User Accounts.
   3. Click Manage another account to create user accounts based on actual requirements.
2. Add new users to the remote desktop users group:
   1. In the Run dialog box, enter lusrmgr.msc and click OK to open Local Users and Groups. Click Groups and double-click Remote Desktop Users.
      
   2. Click Add.
      
   3. In the Select Users dialog box, click Advanced.
      
   4. Click Find Now. In the Search results section, select the user accounts that are created in the previous step. Then, click OK.
      
   5. Confirm the accounts to be added and click OK.

Remote Desktop Licensing expires

By default, Remote Desktop Licensing is valid for 120 days. After 120 days, the authorization expires and you may not be able to log on. You must re-authorize the remote desktop. For more information, see Apply for a license for authorizing multi-user sessions and activate a Windows ECS instance.

Application scope

• ECS