Terminal Services-Access Denied to Administrators

Tech-Archive recommends: Speed Up your PC by fixing your registry

From: Charles Otstot (saries_at_notmyreal.address.com)
Date: 01/24/05 

Date: Mon, 24 Jan 2005 14:33:33 -0500

We have some new installations of Server 2003 using Terminal Services in
Administration mode which are denying access to members of the local
administrators group. User logins fail with a simple "Access
Denied...Contact your System Administrator" message.
The servers are members of different NT 4.0 domains (yes, I know) which all
trust a single domain (Note: All domains are both resource and account
domains). Local users with administrator-level credentials can access the
servers successfully, however domain accounts from a server's parent domain
cannot access the server even if those accounts are members of the local
administrators group on the server. No registry/security policy changes have
been made to exclude anyone from accessing. Even explicitly adding the user
to the local "remote users" group via the system tab does not permit the
user to log in. Users can log in locally at the system console.
Adding the user to either the parent domain's local administrators group or
domain administrators group allows the user to log in, as does adding the
user to either of these groups in the trusted domain.

Some of the additional steps taken to date (All ineffective except as noted
immediately above):

Add the user to the "Allow logon through Terminal Services" policy.
Forcing replication throughout all domains and verifying that the user has
access to the proper domains.
Creating a new domain user in the parent domain with local admin rights on
the target server, then forcing replication as above.
Create users in the trusted domain with local admin rights to the target
server, then forcing replication, etc.

Any ideas on troubleshooting this further would be greatly appreciated!!

Thanks,
Charlie

Relevant Pages

  • Re: RRAS Monitor
    ... at least track some of what they are doing on the server. ... with a user in the administrators group. ... I have added the support members to a group that has ...
    (microsoft.public.windows.server.security)
  • Terminal Svcs Access denied to administrators- 2nd Posting
    ... The servers are members of different NT 4.0 domains ... cannot access the server even if those accounts are members of the local ... administrators group on the server. ... Add the user to the "Allow logon through Terminal Services" policy. ...
    (microsoft.public.windows.server.general)
  • Re: User Rights in TS
    ... OK - as far as setting those permissions goes, enabling full rights for the ... Regarding deploying the server without Group Policy active. ... If it's the local administrators group, ...
    (microsoft.public.windows.terminal_services)
  • Re: Connection Problems
    ... SQL BI Product Unit ... >>administer the AS server (i.e. running Analysis ... I have created a Domain Level Olap ... >>> Domain Level Administrators Group. ...
    (microsoft.public.sqlserver.olap)
  • Re: Access rights issue with Sharepoint - newbie question
    ... as the WSS server isn't running activedirectory. ... That I took the domain users out of the domain admins group on the WSS ... one that would be making all the site-changes to the SharePoint app as ... Administrators Group) - I believe it may be because the users are not ...
    (microsoft.public.sharepoint.windowsservices)