It seems it’s not quite as simple as this. Here was what we think is the solution:
This problem could be due to the fact that the accounts used to provision a robot (developer accounts) do not have the Local User Rights Policy ‘Access this computer from the network’
This would work when using an admin username because it will be part of the local ‘Administrators’ group which has this policy.
There are 3 options to resolve this:
Add the user account(s) into a group that already has this. However, this group is probably reserved for particular staff and may be hard to request approval.
We add user account(s) into a ‘privileged’ group and give that group access to the ‘Administrators’ group on the individual VDI. The issue with this approach is that these accounts will have access to many other privileges they do not need.
We add the user account(s) into a ‘privileged’ group and give that group the ‘Access this computer from the network’ policy on the VDI.
Our recommendation is to go with Option 3 if possible.