Re: Policy to allow TS access to servers

Further to what moncho said, add the domain group with the user accounts (or other groups) as members to the Remote Desktop Users group on the Terminal Server(s). Then, the will get whatever rights and permissions on the Terminal Server that being a member of another local group (e.g. Users, Power Users etc.) specifies when they logon remotely. You can also use Restricted Groups to populate the other local groups as necessary. Unless you remove it, the default is that the Domain Users group is a member of the local Users group.

You can do this with the Restricted Groups GP setting:

Computer Configuration
Windows Settings
Security Settings
Restricted Groups
right click, Add Group...
key the name of the domain group (or use the Browse button); click OK
click the lower Add... button - the one associated with "This group is a member of:"
key Remote Desktop Users
click OK; click OK

If you haven't already, if the user accounts are not administrators on the Terminal Server, you will also need to Enable:

Computer Configuration
Administrative Templates
Windows Components
Terminal Services
Allow users to connect using Terminal Services

--
Bruce Sanderson MVP Printing
http://members.shaw.ca/bsanders

It is perfectly useless to know the right answer to the wrong question.



"MikMik" <MikMik@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:D918E8CB-9C7F-430C-8A40-D31931ACAC33@xxxxxxxxxxxxxxxx
What is the best way to allow a group to allow access thru TS??

Shall I add the Doamin group inside the Remote Desktop users
or, add the Domain group in addition to Domain Admins, Administrators???

Please help

Thanks.





.