Windows – Allow Non-Administrator Users to Access Windows 7 Home Premium Via Remote Desktop

You can follow the answer https://superuser.com/a/719819/750636, it works also for Windows 10 (I have Win 10 Home).

It's basically about adding a builtin group Remote Desktop Users (which is different from if you add group manually with net localgroup add command, even if it has same name). Then you can add your common non-admin users to that group using net localgroup command.

Also don't forget, that you need temporarily to elevate your permissions to merge new values into registry. You can do it in regedit on key HKEY_LOCAL_MACHINE\SAM\SAM (right-click on key node -> Permissions -> select Administrators -> check Full Control -> OK). After merging the .reg file into registry, you better remove Full Control permissions of Adminitrators group from that key node.

Also there is a good guide summary on RdpWrap github. They use PsExec to start regedit as System user, which is also good, because you don't need change any permission in regedit.

You can solve this with a two pronged approach:

1. Install the RD Web Access role and enable the remote password change option

The following directions are from the woshub.com article Allow users to reset expired password via RD WebAccess in Windows Server 2012:

In Windows 2012 / 2012 R2 an option appeared that allows a remote user to change their password (current or an expired one) using a special web-page on the RD Web Access server. The password will be changed like this: a user signs in to the registration web page on the server with the RD Web Access role and changes his password using a special form.

A remote password change option is available on the server with the Remote Desktop Web Access (RD Web Access) role, but it is disabled by default. To change a password, a script password.aspx is used, which is located in C:\Windows\Web\RDWeb\Pages\en-US.

1. To enable the password change option, on the server with the configured RD Web Access role open the IIS Manager console, go to [Server Name] –> Sites –> Default Web Site –> RDWeb –> Pages and open the section Application Settings.

   

2. In the right pane, find PasswordChangeEnabled parameter and change its value to true.

   

3. You can test the password change mechanism going to the following web-page:

   https://RDSServerName/RDWeb/Pages/en-US/password.aspx

   

4. Now when trying to connect to the RD Web Access server with the expired password, a user will be redirected to password.aspx web-page and offered to change his password.

   

   Tip. The same Windows Server 2008 R2 feature can become available after you install a special patch — KB2648402.

2. Enable prompts notifying users of pending password expiration

1. Run gpedit.msc on the RDSH server to open Local Group Policy
2. Nagivate to Computer Configuration\Windows Settings\Local Policies\Security Options
3. Edit the setting Interactive logon: Prompt user to change password before expiration and specify a reasonable number of days, such as 14.
4. Users, including those logged in via Remote Desktop, will receive a notification prior to their password expiring.