Great question — answering as the UphillTech team:
Similar question at How can I limit the users that have remotely access to PC using xrdp.ini configuration file? So by default, xrdp will allow any user to perform the remote connection.... To allow only certain users to perform an rdp connection via the XRDP server, you will need to perform the following Create a group called tsusers In this group, you add all users that will be allowed to perform the remote session in the /etc/xrdp/sesman.ini, locate the Section [Security] and change the line 'AlwaysCheckGroup from false to true' [Security] AllowRootLogin=true MaxLoginRetry=4 TerminalServerUsers=tsusers TerminalServerAdmins=tsadmins ; When AlwaysGroupCheck=false access will be permitted ;...
Full answer by Griffon: https://askubuntu.stackexchange.com/a/1444793 (CC BY-SA 4.0).
Need it done for your business? UphillTech.