Find CanRdp path but failed to rdp

[sehot]

Hi
I have 3 domain controllers

I search for path from non privilege user to domain admin,
One of the path show me that that user can RDP to one of the domain controllers , i tried to rdp with mstsc.exe , but got the following error:

"to sign in remotely you need the right to sign in through remote desktop services"

what am i missing here ?
Why it shows that I can rdp if i cant ?

[rvazarkar]

Hi

First of all this is the legacy bloodhound repo which is no longer maintained. To answer your question though, RDP requires a combination of several rights, one of which the old version of bloodhound does not collect. BloodHound CE appropriately accounts for user rights assignments necessary for RDP to function properly and eliminates this false positive

https://github.com/SpecterOps/BloodHound