Add a Developer Account to Your VPS with RDP Access (Limited Permissions)

Need to give a developer access to your Windows VPS? This guide shows how to add a secondary user with RDP access and no admin rights, using only the built-in Windows interface (no command line).

🖥️ Step 1: Log into Your VPS (as Administrator)

1. Open Remote Desktop Connection on your PC (mstsc)
2. Enter your VPS IP and login as Administrator

👤 Step 2: Create a New User Account

1. Click Start, type lusrmgr.msc and press Enter
   (This opens Local Users and Groups)
2. In the Users folder, right-click > New User...
3. Fill out:
   • Username: (e.g. devuser)
   • Password: something secure
   • ✅ Tick Password never expires
   • ❌ Untick User must change password at next logon
4. Click Create > Close

👥 Step 3: Allow the New User to Connect via RDP

Adding them to the "Remote Desktop Users" group isn't enough on its own. You must also approve them in RDP settings:

1. Click Start, type Remote Desktop settings and open it
2. Scroll down and click "Select users that can remotely access this PC"
3. In the pop-up, click Add…
4. Type the username you just created (e.g. devuser)
5. Click OK to confirm

✅ Now they’re allowed to log in via RDP
❌ Still no admin rights — completely safe for developers

🔒 Step 4: (Optional) Restrict Their Permissions

🔧 Limit Folder Access:

1. Right-click any sensitive folder > Properties
2. Go to Security > Edit
3. Add devuser and set:
   • ❌ Deny access
   • ✅ Or allow only Read permissions

⚙️ Lock Down System Settings (Optional Advanced):

If needed, go to gpedit.msc >
User Configuration > Administrative Templates
From there, you can:

• Block access to Control Panel
• Disable Task Manager
• Prevent running CMD or PowerShell
• Hide specific drives or folders

🧪 Step 5: Test It

On a separate PC:

1. Open Remote Desktop Connection
2. Enter your VPS IP
3. Log in using:
   • Username: .\devuser
   • Password: (you set it earlier)

✅ They should log in successfully
❌ No ability to install apps, change system settings, or access admin tools

🔁 How to Remove Access Later

1. Open lusrmgr.msc
2. Right-click the user > choose Delete or Disable

🧰 Need Help?

We're here to support you.
👉 https://htnetwork.one/contact-us