Re: Server 2K3 Remote Desktop Access - is this right place?

From: Mike Rosado [MSFT] (mikeros_at_online.microsoft.com)
Date: 09/08/04 

Date: Wed, 8 Sep 2004 08:37:45 -0500

Jerry,

All roads for that particular error of 'You do not have access to logon to
this session' lead to the same thing related to Local Group Policy.

278666 Error Message When You Try to Connect to a Terminal Server Computer
http://support.microsoft.com/?id=278666

1. On Windows Server 2003, launch GPEDIT.MSC from Start -> Run.
2. Drill down and expand the following for Local Computer Policy:
            \Computer Configuration
                \Windows Settings
                    \Security Settings
                        \Local Policies
                            \User Rights Assignment
3. Then confirm that users are added to 'Allow log on through Terminal
Services', 'Allow log on locally' and 'Access this computer from the
network'.
4. Then confirm that uses are NOT added to 'Deny log on through Terminal
Services', 'Deny log on locally' and 'Deny access to this computer from the
network'

For more information on this subject, once Local Computer Policy
(GPEDIT.MSC) is launch then search the Help file for User Rights Assignment. 

-- 
Hope this helps,
Mike Rosado
Windows 2000 MCSE + MCDBA
Microsoft Enterprise Platform Support
Windows NT/2000/2003 Cluster Technologies
====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
<http://www.microsoft.com/info/cpyright.htm>
Delighting customers is our top priority. We welcome your valuable comments
and suggestions about how to improve the service we provide you. So if you
would like provided us feedback, feel free to e-mail my manager Brian
Pennington then click on the following e-mail hyperlink with a short
statement with regards to your Online support experience
<mailto:BPenning@microsoft.com?subject=Newsgroup_Experience&body=Brian,>.
Thank you.
-----Original Message-----
"Jerry Barrett" <news@thedemocentre.com> wrote in message
news:chmvgt$4gf$1@news.netkonect.net...
> Mike Hi Thanks for the reply.
>
> I added Admin and Administrator to the group policy for Remote Access and
I
> still cant get access, although the screen comes up with a logon dialogue
> box.
>
> Strange - when I activate the Remote Desktop Terminal from the server, I
get
> the same message, 'you do not have access to logon to this session'
>
> The server is behind a firewall for the LAN connection does not have a
> firewall enabled. I would have thought I just wouldn't make a connection
> screen if the firewall was a problem.
>
> The policy troubleshooter is the exact opposite of my problem, I can logon
> to the console fine, juts not through Remote Desktop...
>
> ***pulling hair out***
>
> Any other ideas please - Cheers
> Jerry
>
> "Mike Rosado [MSFT]" <mikeros@online.microsoft.com> wrote in message
> news:413ef76e$1@news.microsoft.com...
> > Hi Jerry,
> >
> > I'm by no means an expert in this subject matter, but since no one has
> > responded to your posting then I'll try to assist you to the best of my
> > ability.
> >
> > Have you tried configuring different options within the Local Group
> Policies
> > of the Windows Server 2003 similar to the ones discussed in the
following
> > article?
> >
> > 841188 "The local policy of this system does not permit you to logon
> > http://support.microsoft.com/?id=841188
> >
> > Have you tried configuring different options within the Internet
> Connection
> > Firewall (ICF) or Microsoft Windows Firewall within Windows XP as
> discussed
> > in the following article?
> >
> > 875357 Troubleshooting Windows Firewall settings in Windows XP Service
> Pack
> > 2
> > http://support.microsoft.com/?id=875357
> >
> > -- 
> > Hope this helps,
> > Mike Rosado
> > Windows 2000 MCSE + MCDBA
> > Microsoft Enterprise Platform Support
> > Windows NT/2000/2003 Cluster Technologies
> >
> > ====================================================
> > When responding to posts, please "Reply to Group" via your newsreader so
> > that others may learn and benefit from your issue.
> > ====================================================
> >
> > This posting is provided "AS IS" with no warranties, and confers no
> rights.
> > <http://www.microsoft.com/info/cpyright.htm>
> >
> > Delighting customers is our top priority. We welcome your valuable
> comments
> > and suggestions about how to improve the service we provide you. So if
you
> > would like provided us feedback, feel free to e-mail my manager Brian
> > Pennington then click on the following e-mail hyperlink with a short
> > statement with regards to your Online support experience
> >
<mailto:BPenning@microsoft.com?subject=Newsgroup_Experience&body=Brian,>.
> > Thank you.
> >
> > -----Original Message-----
> >
> > "Jerry Barrett" <news@thedemocentre.com> wrote in message
> > news:chmohf$2rq$1@news.netkonect.net...
> > > Hi
> > > I have recently installed Win2K3 server on a local server, thinking I
> > would
> > > be able to manage it remotely from WinXP desktop, much like I do with
> > Win2K
> > > web server I have running.
> > >
> > > No chance, the Remote Desktop Services have been repackaged and I cant
> > make
> > > head nor tails of them.
> > >
> > > I'm have finally got the screen to appear and ask for a logon after
> > > searching through various MMC's in the admin menu, But I cant get the
> > login
> > > to allow access. The server is in a workgroup and I use the Computer
> > Manager
> > > setup user and group info, so no AD.
> > >
> > > I have used the Administrator account and a user ID with admin
> > permissions,
> > > neither will allow access.
> > >
> > > I have enabled 'Allow remote access' in My Computer properties and
> enabled
> > > access in the Remote Desktop MMC. I have added the users to the Remote
> > > Desktop MMC connections properties.
> > >
> > > I have sorta run out of ideas now. Please help.
> > >
> > > Cheers
> > > Jerry
> > >
> > >
> >
> >
>
>

Relevant Pages

  • RE: Remote Workplace
    ... Please ensure the laptop located in LAN network and joined the domain, ... Click Select Remote Users, ensure the user is in the users list. ... quotation marks) on the computer and then logoff and logon the laptop. ... The error "The local policy of this system does not permit you to log on ...
    (microsoft.public.windows.server.sbs)
  • Re: GPO problems when logon to kerberos-realm
    ... when I put the same policy on an OU with e.g. a Windows ... problem when logon to a Terminal Server. ...
    (microsoft.public.windows.group_policy)
  • RE: HELP!!!!
    ... I understand that users can not logon to the SBS ... server computer side) or when users logon the server using Remote Desktop ... The error "The local policy of this system does not permit you to log on ...
    (microsoft.public.windows.server.sbs)
  • Re: local GPO question
    ... You just had the option of> synchronous or asynchronous policy processing. ... Windows XP lets you wait for the network or not. ... I had understood that turning off Fast logon optimization in>> XP ...
    (microsoft.public.win2000.group_policy)
  • Re: local GPO question
    ... synchronous or asynchronous policy processing. ... Windows XP lets you wait for the network or not. ... > "Note that Windows XP clients support Fast Logon Optimization in any ...
    (microsoft.public.win2000.group_policy)