Re: Allowing a Domain User Remote Desktop Access

Tech-Archive recommends: Fix windows errors by optimizing your registry

Thanks for the reply, I tried running the command line you recommended and
received this error,

"System error 1789 has occurred.

The trust relationship between this workstation and the primary domain
failed."

That's given me some more info to work around, thx. Anymore details anyone
could provide would also be appreciated.

Scott.


"Steven L Umbach" <n9rou@xxxxxxxxxxxxxxxxxx> wrote in message
news:uyDeB3IRFHA.1416@xxxxxxxxxxxxxxxxxxxxxxx
> Verify that the domain computer in question has proper connectivity to a
> domain controller and that there is not a problem with the domain computer
> account. The support tool netdiag would be the easiest way to do such. You
> could also try command line as in [ net localgroup "remote desktop users"
> "domainname\account" /add ]. --- Steve
>
>
> "Scott O'Sullivan" <drear80@xxxxxxxxxxx> wrote in message
> news:%23NljKcYQFHA.3448@xxxxxxxxxxxxxxxxxxxxxxx
>> I've tried this with no success. Anyone want to shed some light here. How
>> can I add a domain user account to a machine's local Remote Desktop Users
>> group. If I try and add users to the local group, I can only choose from
>> local users. Hitting 'Locations' doesn't give me any other options.
>>
>> Scott.
>>
>> "Roger Abell" <mvpNOSpam@xxxxxxx> wrote in message
>> news:uXuCwdAPFHA.2384@xxxxxxxxxxxxxxxxxxxxxxx
>>> The domain group named Remote Desktop Users controls
>>> RDP login to the domain controllers only.
>>> You need to
>>> 1. make sure Domain Users or the account is a member of
>>> the workstation's Users group
>>> 2. the account is a member of the machine's Remote Desktop
>>> Users group
>>>
>>> --
>>> Roger
>>> "Scott O'Sullivan" <drear80@xxxxxxxxxxx> wrote in message
>>> news:uHo0Pd%23OFHA.3704@xxxxxxxxxxxxxxxxxxxxxxx
>>>> Hi,
>>>>
>>>> I'm trying to grant access to a domain user allowing them to logon to
>>>> another workstation in the domain with remote desktop. When I try and
>>>> connect remotely using their account, I get the error message, 'The
>>>> local
>>>> policy of this system does not allow you to logon interactively'.
>>>>
>>>> The default local policy on the workstation has the setting:
>>>> Computer Configuration>Windows Settings>Security Settings>Local
>>>> Policies>User Rights Assignment>Allow logon through terminal services:
>>>> Administrators, Remote Desktop Users.
>>>>
>>>> The domain user account I'm trying to logon with, is a member of the
>>>> following groups: Domain Users, Remote Desktop Users.
>>>>
>>>> Because the local policy is referring to the local group, Remote
>>>> Desktop
>>>> Users, it doesn't seem to recognise the domain user as a member, even
>>> though
>>>> it's a member of the Remote Desktop Users group in Active Directory.
>>>>
>>>> Logging on remotely with a domain admins account works fine, as all
>>>> administrators/domain administrators have access by default.
>>>>
>>>> How can I grant access to this domain user account allowing them to
>>> remotely
>>>> connect to this workstation? Any help given would be greatly
>>>> apprecitated.
>>>>
>>>> Thx,
>>>> Scott O'S.
>>>>
>>>>
>>>
>>>
>>
>>
>
>


.

Relevant Pages

  • Re: Allowing a Domain User Remote Desktop Access
    ... domain controller and that there is not a problem with the domain computer ... > can I add a domain user account to a machine's local Remote Desktop Users ... the account is a member of the machine's Remote Desktop ...
    (microsoft.public.windows.group_policy)
  • Re: Advanced Client push not working
    ... > System error 1311 has occurred. ... > There are currently no logon servers available to service the logon ... Seems that there is no communication with a domain controller. ... doing the net use tests, use the full domain name of the account, i.e. ...
    (microsoft.public.sms.admin)
  • Re: Finding a Hacker
    ... definitely had the capability to obtain the domain admin credentials and may ... If the hacker did get in remotely using an administrator account on the ... Your problem is not restricting remote desktop connections. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Finding a Hacker
    ... Settings, Security Settings, Local Policies. ... create an account you couldn't see, but if you thought they may have ... Your problem is not restricting remote desktop connections. ... got logged off and a user "userHacker" logged back in. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Finding a Hacker
    ... Settings, Security Settings, Local Policies. ... I guess if someone had domain admin rights they may be able to ... create an account you couldn't see, but if you thought they may have ... Your problem is not restricting remote desktop connections. ...
    (microsoft.public.windows.server.active_directory)