Re: Terminal Services denied to all but domain admins

Hello 61shevy,

Open the Terminal services manager and go to the tabs from the RDP protocol properties.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.dts-l.org/goodpost.htm

Yes, a valid license server is configured and recognized. Not sure
exactly what you mean when you ask Do you configure the terminal
server options for RDP protocol

"Meinolf Weber" wrote:

Hello 61shevy,

Do you configure the terminal server options for RDP protocol and
setup the license server?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and
confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.dts-l.org/goodpost.htm
I have a W2K3 Terminal Server in application mode. Have added users
to the Remote desktop group, but the only way a user is allowed to
log on via Term Serv is if they are a member of the domain admins
group. I have checked to make sure that the remote desktop group has
permission to log on locally and log on via terminal services in
group policy (they do). The Active Directory is 2003, upgraded from
2000 AD. I have checked domain policy to make sure that log on
locally was not restricted to domain admins back in the 2K days
(doesn't appear to be). I'm not sure where to go with this. Don';t
want to give all users domain admin rights, but have to have a way
for them to log on via terminal services. Any other place I could
check where this restriction might be set, I would sure appreciate
hearing about it. Thanks for your help.



.

Relevant Pages

  • Re: Windows 2000 Terminal services stops after recent updates
    ... 323497 - Error Message: The RDP Protocol Component "DATA ENCRYPTION" ... MCSE,CCEA, Microsoft MVP - Terminal Server ... > like normal, but you cannot Terminal Services to it, nor can you ...
    (microsoft.public.win2000.termserv.clients)
  • Re: blocking brute force login attempts
    ... That is a big weakness of the RDP protocol which uses the terminal services ... functionality of w2k3 because you cannot specify which clients can connect. ... addresses allowed to talk to remote desktop would have been enough to block ...
    (microsoft.public.windows.server.security)
  • Re: Remove SBS2003 so Terminal Services available
    ... "Meinolf Weber" wrote: ... I don't use any of the special services in SBS2003, ... Since Terminal Services can't be used with SBS2003 I ... a file server. ...
    (microsoft.public.windows.terminal_services)
  • RE: Remote desktop problem on DCs
    ... ensure that the Domain Admins group, or a group that the Domain Admins group ... has the "Allow log on through Terminal Services" User Rights ... "To log on to this remote computer, you must have Terminal Server User ... Desktop Users group have these permissions. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Restricting RDP to 2k3 DCs to only specific admins and not the entire admin group
    ... You can modify the default DC security policy. ... There is an option there named "Allow log on through Terminal Services". ... As long as they are domain admins they can connect by using other methods. ...
    (microsoft.public.windows.server.security)