Re: Terminal services and login interactively policy

From: Les Connor [SBS MVP] (les.connor_at_DEL.cfive.ca)
Date: 05/17/04


Date: Mon, 17 May 2004 11:47:43 -0500

I suppose if everyone who is allowed to log on to the ts is included in that
group, then that's ok. But it' a bit weird, not exactly descriptive.

Users is a built in security group, I thought a default group that would
exist on every sbs. There are a number of security groups that also belong
to the users group, as I recall.

But this is all from memory at the moment ..... perhaps somebody else can
confirm.

Did you follow the white paper 'adding a ts server to host user desktops' ?

If the SBSDOMAIN\Domain Users group was granted log on locally rights for
the TS, perhaps that would do it ?

-- 
Les Connor [SBS MVP]
-------------------------------------
SBS Rocks !
"Andrew H" <ajhpms@hotmail.com> wrote in message
news:%231nRDxCPEHA.3944@tk2msftngp13.phx.gbl...
> Hi Les
>
> There is no existing group SBSDOMAIN\Users.
> The group SBSDOMAIN\Domain Users was already part of the terminal server's
> Users group, so I guess that wasn't the problem
>
> However, as an experiment I added the group SBSDOMAIN\SBS Mobile Users to
> the terminal server's Users group, and now the non-admin user seems to be
> able to log in.
>
> Does this sound reasonable to you as a solution?
>
> Regards
>
> Andrew
>
>
>
>
> "Les Connor [SBS MVP]" <les.connor@DEL.cfive.ca> wrote in message
> news:uFIzSVCPEHA.2976@TK2MSFTNGP10.phx.gbl...
> > Log in to your ts with administrative rights.
> >
> > Add the group SBSDOMAIN\users to the group Users in Computer Management
|
> > Local Users | Groups.
> >
> > -- 
> > Les Connor [SBS MVP]
> > -------------------------------------
> > SBS Rocks !
> >
> >
> >
> > "Andrew H" <ajhpms@hotmail.com> wrote in message
> > news:%231ghB$BPEHA.3300@TK2MSFTNGP09.phx.gbl...
> > > Hi Jim
> > >
> > > On a closer look at the 3 articles you found, I'm not too sure they
are
> > > applicable.
> > >
> > > 247989 doesn't apply - the T/S machine is not a domain controller
> > > 841188 doesn't apply - the problem isn't in logging in the the SBS
> server
> > > 276590 - I can't work out if this is the problem, but I don't think so
> > >
> > > Regards
> > >
> > > Andrew
> > >
> > > "Jim Behning SBS MVP" <jimbehingmvp@mindspring.com> wrote in message
> > > news:ndbha0pn5nad3263a2b50jed548vjm6ns6@4ax.com...
> > > > http://support.microsoft.com/?kbid=247989 should do it. I start
> > > > searching with www.google.com with the error message in quotes. If
> > > > google is a dud then altavista.com
> > > >
> > > > http://support.microsoft.com/default.aspx?scid=kb;en-us;841188
> > > > http://support.microsoft.com/?kbid=276590
> > > >
> > > > a-cames@online.microsoft.com (Christopher Ames MSFT) wrote:
> > > >
> > > > >-------------------
> > > > >| From: "Andrew H" <ajhpms@hotmail.com>
> > > > >| Subject: Terminal services and login interactively policy
> > > > >| Date: Wed, 12 May 2004 14:40:26 +0200
> > > > >| Lines: 11
> > > > >| X-Priority: 3
> > > > >| X-MSMail-Priority: Normal
> > > > >| X-Newsreader: Microsoft Outlook Express 6.00.2800.1409
> > > > >| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1409
> > > > >| Message-ID: <uiY2P5BOEHA.1276@TK2MSFTNGP11.phx.gbl>
> > > > >| Newsgroups: microsoft.public.windows.server.sbs
> > > > >| NNTP-Posting-Host: rrba-161-169.telkomadsl.co.za 165.165.161.169
> > > > >| Path:
> > > >
> > >
> >
>
>cpmsftngxa10.phx.gbl!TK2MSFTNGXA05.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP1
> > > 1
> > > > >phx.gbl
> > > > >| Xref: cpmsftngxa10.phx.gbl
> microsoft.public.windows.server.sbs:70108
> > > > >| X-Tomcat-NG: microsoft.public.windows.server.sbs
> > > > >|
> > > > >| I've installed Terminal Services onto a Windows 2003 member
server,
> > > > >| licensing seems to be correct, and I can connect as myself.  If I
> try
> > > > >| connect to it as a normal user, I get "the local policy of this
> > system
> > > > >does
> > > > >| not permit you to logon interactively".
> > > > >|
> > > > >| Where do I fix this - in AD on the SBS, group policies, or local
> > > settings
> > > > >on
> > > > >| the TS member server?
> > > > >|
> > > > >| The user is a member of the SBS Mobile Users group.
> > > > >|
> > > > >|
> > > > >|
> > > > >In SBS 2003 you may only run terminal server in remote
administration
> > > mode.
> > > > >This means only administrators can connect. If you need to have
users
> > run
> > > > >applications on the server. It is recommended you have a second
> server
> > > > >running in application mode for access.
> > > > >
> > > > >Thank you,
> > > > >--------------------------
> > > > >Christopher Ames
> > > > >Microsoft Online Support Engineer
> > > > >
> > > > >=====================================================
> > > > >When responding to posts, please "Reply to Group" via your
newsreader
> > > > >so that others may learn and benefit from your issue.
> > > > >
> > > > >For SBS 4.5 issues, post to: microsoft.public.backoffice.smallbiz
> > > > >For SBS 2000 issues, post to:
> microsoft.public.backoffice.smallbiz2000
> > > > >For SBS 2003 issues, post to: microsoft.public.windows.server.sbs
> > > > >=====================================================
> > > > >This posting is provided "AS IS" with no warranties, and confers no
> > > rights.
> > > > ></BODY>
> > > >
> > > > Jim B. SBS  MVP
> > > > remove the mvp to send email
> > >
> > >
> >
> >
>
>


Relevant Pages

  • Re: When DHCP Server service stops-all internet access stops for C
    ... Les Connor [SBS Community Member] ... Ensure that the DHCP Server ...
    (microsoft.public.windows.server.sbs)
  • Re: Move W2K3 server to its own OU seperate from SBS (MyBusiness) OU
    ... Les Connor wrote: ... I can't find a standard SBS policy *except* the default domain controllers ... OP, is your "server" really a domain controller, and not just a member ... local account on the member server. ...
    (microsoft.public.windows.server.sbs)
  • Re: RWW - Application Server Disappears
    ... disappearing from the RWW. ... Les Connor [SBS Community Member - SBS MVP] ... section in the Server Management MMC. ...
    (microsoft.public.windows.server.sbs)
  • Re: Test IMF
    ... The Exchange Intelligent Message Filter does not scan e-mail messages on ... Les Connor [SBS Community Member] ... > What is the machine name of the gateway/IMF server? ...
    (microsoft.public.windows.server.sbs)
  • Re: Installation problems -please help
    ... As Andrew said Don't do that!! ... Frank McCallister SBS MVP ... I am installing SBS 2003 on D: ... You need to boot from disk 1, install the server OS ...
    (microsoft.public.windows.server.sbs)