Re: Terminal Server logon problem

You had a server that was upgraded to SBS 2003? What was it before? Was it in
a domain? If it was, how did you remove it?
How did you remove/add the other DC from its domain to your current one?

"RGA" wrote:


I am getting a group policy error - You do not have permissions to perform
this operation when trying to open the domain group policy snap in on the
addional DC with the domain administrator acct. I can log in ok to domain
group policy snap in on the SBS 2003 box so I have no clue what I have done.
The only thing I thought I changed was taking the administrators account out
of the "Deny logon thru Terminal Services" in the local policy snap in per
your suggestion. I seem to be taking one step forward and 2 steps
back....frustrating!

"Net Admin" <NetAdmin@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:A19D4A35-7063-402D-BC0B-B21357944199@xxxxxxxxxxxxxxxx
Lost Admin privileges? How? What error does it give you?
What account do you use to logon and check the domain policies?
Have you checked the membership of that account to make sure it's a Domain
Admin?

"RGA" wrote:

NetAdmin,

Your suggestion worked. I was doing the settings on the domain security
policy and not the local security policy. Howver now, I try to open the
domain security policy snapin or the domain controller security policy
and I
lost permissions as the administrator to do so???? Any ideas?

Thanks!

"Net Admin" <NetAdmin@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:F8C2C0A9-4CA2-42D3-8285-9C405134ABF5@xxxxxxxxxxxxxxxx
To enable RDP, on the server that you want to RDP into, you must:
1. Use the Remote tab in System Properties and enable it.
2. Make the user a member of the Remote Desktop Users group.
3. Use the Security policy as I mentioned earlier.
4. In Active Directory, make the user a member of the Remote Desktop
Users.
*You don't need to do anything on the client PC.

"RGA" wrote:

That is how I have the policies configured and that is what is
baffling
me.


"Net Admin" <NetAdmin@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:DE63ACA0-9A32-45C8-AD2D-397AE567A082@xxxxxxxxxxxxxxxx
This is how I do it with Server 2003 Standard:
Go to START, RUN, and type in SECPOL.MSC then hit ENTER.
Look under LOCAL POLICIES, USER RIGHTS ASSIGNMENT.
In the right pane there will be a setting called "Allow logon
through
Terminal Services", make sure that account is in there.
Also make sure that account is not in the "Deny logon through
Terminal
Services"
Does this help?

"Coraleigh Miller" wrote:

I meant did you try adding it to the remote users group on the
other
DC,
the
one you are having trouble logging onto.

You might also want to post your question over on the
microsoft.public.windows.terminal_services group, they are very
responsive
with TS related issues.

Coraleigh


"RGA" <blahATblahDOTblah> wrote in message
news:eCVGyEN6HHA.484@xxxxxxxxxxxxxxxxxxxxxxx
Yes, I added the admin acct to the remote desktop users group on
the
SBS
2003 server and I am still not able to log into the DC with the
admin
acct.


"Coraleigh Miller" <CoraleighMiller@xxxxxxxxx> wrote in message
news:%23VrWF%23M6HHA.980@xxxxxxxxxxxxxxxxxxxxxxx
Hi RGA,

Did you try adding the admin account to the local Remote Desktop
Users
group on the other DC?

Coraleigh Miller

"RGA" <blahATblahDOTblah> wrote in message
news:eC9wpBL6HHA.5164@xxxxxxxxxxxxxxxxxxxxxxx
I upgraded my SBS 2003 server over the weekend and all went
well.
In
doing so, I had to demote the other DC in my domain and rejoin
it
to
the
new SBS server's domain. I now cannot log on to the other DC
remotely
with terminal server. I have checked all the policy and terminal
server
settings and permissions and I can't seem to figure it out. I am
able
to
log on with my personal domain acct but the administrator
account
gets
the "To log on to this remote computer you must be granted the
Allow
log
on throuogh Terminal Services right" message. This is really
baffling
me
as I have set all of the settings (I thought) to match those on
the
SBS
2003 server which I am able to log on as the administrator
account.

Help Please! Thanks!

















.

Relevant Pages

  • Re: RWW and Remote desktop stopped working on all clients
    ... After diggin through ALL the group policies, I found Remote ... Desktop DISABLED under the Account Lockout policy - I don't think I've even ... adminsitrator or another account with Domain Admin role; also the server ...
    (microsoft.public.windows.server.sbs)
  • Re: Terminal Server logon problem
    ... I upgraded our current SBS 2003 box to new hardware using SBSMigration.com's ... When it was time to bring the old SBS server offiline and make ... I am getting a group policy error - You do not have permissions to ... The only thing I thought I changed was taking the administrators account ...
    (microsoft.public.windows.server.general)
  • Re: Restrict to 1 program
    ... I would *not* apply the policy to the whole domain. ... Terminal Server computer account in this OU and link the policy to ... Configuration settings from the GPO linked to OU where the computer ...
    (microsoft.public.windows.terminal_services)
  • account lockout issues...
    ... I have a couple of question regarding the account lockout policy. ... I had originally set a local policy on our Win2K terminal server such ...
    (microsoft.public.backoffice.smallbiz2000)
  • Re: 2003 Server working with SBS 2003 Premium
    ... What account are you trying to use? ... The default administrators acct. ... did you enable Remote Desktop? ... >> allowed to log in in the RD properties on the server? ...
    (microsoft.public.windows.server.sbs)
Loading