Re: Users Can't Log Into Local Machine That Is Attached To A Domai

What exactly you did?

- Are you trying to access to a T.S server (is the server a DC or no)?
- Are you trying to access via RDC (Remote desktop connection) to a Windows
XP?
- Do you have any FW between those machines, if yes you need to open port
3389 TCP.

check:
Terminal Services Client Error Message: You Do Not Have Access to Logon to
This Session
http://support.microsoft.com/?id=224395

Domain Controllers Require the "Log on Locally" Group Policy Object for
Terminal Services Client Connections
http://support.microsoft.com/default.aspx?scid=kb;en-us;q247989


--
I hope that the information above helps you

Good Luck
Jorge Silva
MCSA
Systems Administrator

"Dominick D." <DominickD@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:16700702-9D0E-4E46-8349-3031AB5481F2@xxxxxxxxxxxxxxxx
Hi; I made the configurations, as you suggested, and now, when the user
tries
to log into the domain from the WXP box, attached to the domain, this
window
comes up:

You do not have access to logon to the Session.

This is truly getting to be a pain. Can you assist? Thanks.



"Jorge Silva" wrote:

to allow a user to connect to a WXP all you have to do is to configure
the
Wxp machine to accept Remote Desktop Connections (System Properties ->
Remote -> >Allow users to connect...), then you can Select either local
XP
users or make Ad users members of the Remote Desktop Users.

--
I hope that the information above helps you

Good Luck
Jorge Silva
MCSA
Systems Administrator

"Dominick D." <DominickD@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:108C6207-8C8C-4744-ADE3-78624E1F7BD6@xxxxxxxxxxxxxxxx
Hi, I do have an XP machine that is a member of the DC, so, that being
the
case, can't a user log into the XP machine, or does the setting have to
be
set to where the user can log in locally thru terminal services or be
in
the
remote desktop users group?

"Jorge Silva" wrote:

Hi

Normal users aren't allowed to logon in a DC via T.S, you need to give
permissions to allow logon locally on the DC (Windows 2000 Server). If
you're using Windows 2003 you have the option to allow a user to logon
trough terminal services.

You can find these settings on:
Computer Configuration -> Windows Settings -> User Rights
Assignment ->


--
I hope that the information above helps you

Good Luck
Jorge Silva
MCSA
Systems Administrator

"Dominick D." <DominickD@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:5A67164A-563F-4531-A7E1-33A6B9C528F2@xxxxxxxxxxxxxxxx
Hello, Gurus,

I have a DC and a local XP machine on the same subnet; I created a
user
account and when I try to log this user on the attached local
machine,
I
get
this message that says local security policy does not permit user to
interactively log in. I made this user a remote desktop user, set
the
default
domain policies of allowing users to log in thru terminal services,
put
the
user into the print operators group, who has, by default, the right
to
log
into the DC, but I still get that message. Can someone out there
help
me?
Thank you.








.

Relevant Pages

  • RE: Tracing source of remote logons
    ... Logon type 10 is interpreted to RemoteInteractive. ... easy to distinguish true console logons from a remote desktop session. ... Open 'Server Management console', navigate to Users snap-in. ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • RE: The local policy of this system does not allow you to log on inter
    ... If the server is a 2003 Member Server, then the only things required for RDP ... Member of the local Remote Desktop User's Group, or a group with User & ... Users do NOT require the logon locally right for 2003 TS, ... Microsoft MVP - Terminal Server ...
    (microsoft.public.windows.terminal_services)
  • Re: Users Cant Log Into Local Machine That Is Attached To A Domai
    ... Are you trying to access via RDC (Remote desktop connection) to a Windows ... Terminal Services Client Error Message: You Do Not Have Access to Logon to ... Systems Administrator ... You do not have access to logon to the Session. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Time zone redirection
    ... Administration and full-blown Terminal Services. ... MCSE, CCEA, Microsoft MVP - Terminal Server ... client connections:-O. ... Well - obviously that does not work in Remote Desktop Admin mode ...
    (microsoft.public.windows.terminal_services)
  • RE: security logon failures
    ... who can access it and remote desktop is disabled. ... logon advapi which is showing up under failure, ... SBSNTSRV2 is your only server, If so, As you said, the only one who can ... server have remote desktop enabled and one or multiple client computer are ...
    (microsoft.public.windows.server.sbs)