Re: Centrally control Terminal Services logon rights

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Mathias Haas (mathias.haas.nospam_at_tv4.se)
Date: 06/29/04 

Date: Tue, 29 Jun 2004 10:56:17 +0200

Thanks for the reply Cary! (A Schönen guten Morgen to you too! :-)

I think there's a difference in enabling users to use TS and allowing them
to log on using Remote Desktop.

When a user tries to logon to log on using the Terminal Services client they
gety the following error message:

"You do not have access to logon to this session. "

>From Q224395
"Terminal Services has a default connection security setting allows only
administrators to log on. If the security attributes on a specified
connection have not been set, the connection inherits these default security
settings. For additional information, please see the following article in
the Microsoft Knowledge Base: "

Is there a way to grant a certain group log on permissions on multiple
servers?

/Mathias

"Cary Shultz [A.D. MVP]" <cwshultz@mvps.org> wrote in message
news:u9ykCfZXEHA.1684@tk2msftngp13.phx.gbl...
> Schoenen Guten Morgen, Mathias!
>
> You might want to look at the ADUC as for each user account object there
is
> a "Terminal Services Profile" tab and at the bottom there is a "Allow
logon
> to Terminal Server" checkbox that needs to be checked...assuming that you
> want this particular user to be able to logon to the Terminal Server.
This
> might be yet one other place!
>
> In Windows 2003 I believe that there is a 'Remote Desktop Users' group
that
> pretty much takes care of this. However, please note that I have not done
> much with WIN2003 yet so that might not be completely accurate.
>
>
> "Mathias Haas" <mathias.haas.nospam@tv4.se> wrote in message
> news:%23qahzmTXEHA.2940@TK2MSFTNGP09.phx.gbl...
> > Is there any place in the AD where I can centrally control who is
allowed
> to
> > logon to a server through Terminal Services? I guess there must be, but
I
> > haven't found where. Initially I thought that "Log on locally" and
"Access
> > this computer from the Network" would suffice but it seems to me that I
> have
> > to mange the user/group in Terminal Services Configuration as well (see
> KB:
> > Q224395) ?
> >
> > Regards,
> > Mathias.
> >
> >
>
>

Relevant Pages

  • Re: Terminal Server User Setup
    ... if you have published terminal services to internet. ... >> I already setup the Terminal Server and all users can connect to TS ... users can logon to domain through VPN and then ...
    (microsoft.public.windows.server.sbs)
  • Re: Users cant use terminal services !!!
    ... Controller Security Policy. ... MCSE, CCEA, Microsoft MVP - Terminal Server ... on the "Terminal Services profile" tab. ... Did you add your users to the *local* Remote Desktop Users ...
    (microsoft.public.windows.terminal_services)
  • Re: Users cant use terminal services !!!
    ... MCSE, CCEA, Microsoft MVP - Terminal Server ... I'm editing the policy in the DC and found the policie "Deny ... And still getting the same message at logon through TS, ... But with Terminal services they keep receiving ...
    (microsoft.public.windows.terminal_services)
  • Re: Users cant use terminal services !!!
    ... About not seeing the "Logon through TS" user right: ... Are you editing the policies from your DC? ... MCSE, CCEA, Microsoft MVP - Terminal Server ... But with Terminal services they keep receiving the ...
    (microsoft.public.windows.terminal_services)
  • Re: how to secure terminal server, no software installation, and etc
    ... Your Terminal Services Security Website ... > MCSE, CCEA, Microsoft MVP - Terminal Server ... >> Server machine account to the security list of the GPO (keep the ...
    (microsoft.public.windows.terminal_services)