RE: Terminal Services to a W2K DC - problems

From: Greck (Greck_at_discussions.microsoft.com)
Date: 08/26/04 

Date: Thu, 26 Aug 2004 15:29:05 -0700

I think what you are looking for is the "log on locally" right that I believe
is found under:
Domain Controller Security Policy => Local Policies => User Right Assignment

-g

"P_James" wrote:

> I have a group of users who are given permissions on a DC to accomplish a set
> of tasks when logged on locally to the console. However, when they are
> logging in using Terminal Services Client a small popup appears after login
> that says "access is denied". They are unable to perform any tasks on the
> machine other than browse. There is SP4 on the machine and the users can
> function normally logged in directly to the console. The popup does not
> appear in any event logs and does not have any other presence on the machine,
> so I cannot determine what or where the errors are. I am sure there is a
> group policy limitation I am missing, but the only way they are able to work
> is if I add them to the domain administrators group - this is a security risk
> we are not wishing to take. The MUST be able to use terminal services
> sessions to do on-call work on these machines. Can anyone help me?

Relevant Pages

  • Re: Local Policy
    ... > In Administrative Tools, go to Domain Controller Security Policy. ... and then click User Rights Assignment. ...
    (microsoft.public.win2000.active_directory)
  • Re: SMS 2.0 Client on Domain controller fails error 1069
    ... The error 1069 is "The service did not start due to a logon failure." ... I have seen issues where the Default Domain Controller Security Policy has ... The second server fails with the following error ...
    (microsoft.public.sms.setup)
  • Re: local admin permissions on DC
    ... Domain Controller Security policy. ... ("Allow logon through Terminal Services" ... > This is for monitoring a branch office DC -- the IT person was the NT ...
    (microsoft.public.windows.server.general)
  • no "domain controller security policy" under administrative tools
    ... I am logged on as admin but cannot see "domain controller security policy", ... Have no problems on other DC's on the network. ... Steve ...
    (microsoft.public.win2000.active_directory)