Group_remote users is the group needed for a user to RDP a machine
1. Open Active directory user and computers (run -> dsa.msc)
2. Click the domain
3. Find (choose users, groups etc) for the user
4. Once the user is listed, double click or right click and select properties
5. Click “Member of” -> Add Group remote users group in it.