Allow logon through Terminal Services via Group Policies does not work



Hi

I am trying to setup a GPO so that a specific security, say My Remote
Desktop Users, are allowed to logon to any computer on a Windows 2003 domain
using Terminal Services.

I have created the GPO and linked it from the domain and from the Domain
Controllers OU and I have checked that Allow users to connect remotely using
Terminal Services is enabled and that Allow log on through Terminal Services
is enabled and contains the group My Remote Desktop Users. According to
KB278433 this should do the trick, but apparently it doesn't. User trying to
log on get a message saying "You do not have access to log to this Session"
or "To log on to this computer, you must have Terminal Services User Access
permissions on this computer...".

The per user permission for Terminal Service logon is enabled.

Incidentally, the other hosts on the domain are running Windows 2003 and
Windows XP.

Is there anything else that I need to configure in the GPO before things
will work out?

Regards
Morten Frederiksen



.



Relevant Pages

  • Re: lsass.exe problem when logging into terminal server.
    ... It seems that you have installed Terminal Services without licenses. ... On windows 2003 you have to enable Remote Desktop on the System ... Jeffrey Randow (Windows Networking MVP) ...
    (microsoft.public.windowsxp.work_remotely)
  • Re: Connecting "as if right in front of the PC"
    ... In order to use TSC to control a desktop the desktop must be running XP Pro Remote Desktop or be a ... Windows 2003/2000 Server running Terminal Services. ... An alternative, if your desktop is running some other flavor of Windows, is VNC. ...
    (microsoft.public.pocketpc.wireless)
  • Re: Remote Desktop
    ... Just want to point out, that on WIndows 2000 Server, Terminal servics needs ... It can be installed as either in Remote ... In Windows XP and Windows 2003 Server they have the Remote ... full "Terminal Services" functionality, which is the equivalent to Windows ...
    (microsoft.public.win2000.networking)
  • Re: Where do I add Remote Control
    ... Terminal Services -> Allow users to connect remotely using Terminal ... Unfortunately I was looking at a Windows XP SP2 RC machine. ... If this is set to 0, Remote Connections are allowed. ... >I have changed the group policy a long time ago to what I ...
    (microsoft.public.windows.group_policy)
  • Re: Terminal Services GPO
    ... I am trying this on a upgraded (from Windows 2000 Advanced ... Server) Windows Server 2003 Enterprise edition domain ... I have another GPO that I am able to see the ... >> when I go back into the GPO the terminal services object ...
    (microsoft.public.win2000.group_policy)

Loading