Problem:
How can allow non-administrator accounts login to a console session using mstsc RDS?
Solution:
Run the below command:
wmic /namespace:\\root\cimv2\TerminalServices PATH WIN32_TSPermissionsSetting.TerminalName="Console" call AddAccount "domain\MyADGroup",2
0 = WINSTATION_GUEST_ACCESS
1 = WINSTATION_USER_ACCESS
2 = WINSTATION_ALL_ACCESS
You can now use mstsc /admin for these accounts even though they are not administrators