Believe they have to be in the Remote Desktop Users group.