Re: Terminal services and login interactively policy
From: Les Connor [SBS MVP] (les.connor_at_DEL.cfive.ca)
Date: 05/17/04
- Next message: Henry Craven: "Re: Public folders to be seen in companyweb"
- Previous message: Henry Craven: "Re: Help! SBS shutdown and restart when it want!!!"
- In reply to: Andrew H: "Re: Terminal services and login interactively policy"
- Next in thread: Jeff Middleton [SBS-MVP]: "Re: Terminal services and login interactively policy"
- Reply: Jeff Middleton [SBS-MVP]: "Re: Terminal services and login interactively policy"
- Messages sorted by: [ date ] [ thread ]
Date: Mon, 17 May 2004 11:47:43 -0500
I suppose if everyone who is allowed to log on to the ts is included in that
group, then that's ok. But it' a bit weird, not exactly descriptive.
Users is a built in security group, I thought a default group that would
exist on every sbs. There are a number of security groups that also belong
to the users group, as I recall.
But this is all from memory at the moment ..... perhaps somebody else can
confirm.
Did you follow the white paper 'adding a ts server to host user desktops' ?
If the SBSDOMAIN\Domain Users group was granted log on locally rights for
the TS, perhaps that would do it ?
-- Les Connor [SBS MVP] ------------------------------------- SBS Rocks ! "Andrew H" <ajhpms@hotmail.com> wrote in message news:%231nRDxCPEHA.3944@tk2msftngp13.phx.gbl... > Hi Les > > There is no existing group SBSDOMAIN\Users. > The group SBSDOMAIN\Domain Users was already part of the terminal server's > Users group, so I guess that wasn't the problem > > However, as an experiment I added the group SBSDOMAIN\SBS Mobile Users to > the terminal server's Users group, and now the non-admin user seems to be > able to log in. > > Does this sound reasonable to you as a solution? > > Regards > > Andrew > > > > > "Les Connor [SBS MVP]" <les.connor@DEL.cfive.ca> wrote in message > news:uFIzSVCPEHA.2976@TK2MSFTNGP10.phx.gbl... > > Log in to your ts with administrative rights. > > > > Add the group SBSDOMAIN\users to the group Users in Computer Management | > > Local Users | Groups. > > > > -- > > Les Connor [SBS MVP] > > ------------------------------------- > > SBS Rocks ! > > > > > > > > "Andrew H" <ajhpms@hotmail.com> wrote in message > > news:%231ghB$BPEHA.3300@TK2MSFTNGP09.phx.gbl... > > > Hi Jim > > > > > > On a closer look at the 3 articles you found, I'm not too sure they are > > > applicable. > > > > > > 247989 doesn't apply - the T/S machine is not a domain controller > > > 841188 doesn't apply - the problem isn't in logging in the the SBS > server > > > 276590 - I can't work out if this is the problem, but I don't think so > > > > > > Regards > > > > > > Andrew > > > > > > "Jim Behning SBS MVP" <jimbehingmvp@mindspring.com> wrote in message > > > news:ndbha0pn5nad3263a2b50jed548vjm6ns6@4ax.com... > > > > http://support.microsoft.com/?kbid=247989 should do it. I start > > > > searching with www.google.com with the error message in quotes. If > > > > google is a dud then altavista.com > > > > > > > > http://support.microsoft.com/default.aspx?scid=kb;en-us;841188 > > > > http://support.microsoft.com/?kbid=276590 > > > > > > > > a-cames@online.microsoft.com (Christopher Ames MSFT) wrote: > > > > > > > > >------------------- > > > > >| From: "Andrew H" <ajhpms@hotmail.com> > > > > >| Subject: Terminal services and login interactively policy > > > > >| Date: Wed, 12 May 2004 14:40:26 +0200 > > > > >| Lines: 11 > > > > >| X-Priority: 3 > > > > >| X-MSMail-Priority: Normal > > > > >| X-Newsreader: Microsoft Outlook Express 6.00.2800.1409 > > > > >| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1409 > > > > >| Message-ID: <uiY2P5BOEHA.1276@TK2MSFTNGP11.phx.gbl> > > > > >| Newsgroups: microsoft.public.windows.server.sbs > > > > >| NNTP-Posting-Host: rrba-161-169.telkomadsl.co.za 165.165.161.169 > > > > >| Path: > > > > > > > > > > >cpmsftngxa10.phx.gbl!TK2MSFTNGXA05.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP1 > > > 1 > > > > >phx.gbl > > > > >| Xref: cpmsftngxa10.phx.gbl > microsoft.public.windows.server.sbs:70108 > > > > >| X-Tomcat-NG: microsoft.public.windows.server.sbs > > > > >| > > > > >| I've installed Terminal Services onto a Windows 2003 member server, > > > > >| licensing seems to be correct, and I can connect as myself. If I > try > > > > >| connect to it as a normal user, I get "the local policy of this > > system > > > > >does > > > > >| not permit you to logon interactively". > > > > >| > > > > >| Where do I fix this - in AD on the SBS, group policies, or local > > > settings > > > > >on > > > > >| the TS member server? > > > > >| > > > > >| The user is a member of the SBS Mobile Users group. > > > > >| > > > > >| > > > > >| > > > > >In SBS 2003 you may only run terminal server in remote administration > > > mode. > > > > >This means only administrators can connect. If you need to have users > > run > > > > >applications on the server. It is recommended you have a second > server > > > > >running in application mode for access. > > > > > > > > > >Thank you, > > > > >-------------------------- > > > > >Christopher Ames > > > > >Microsoft Online Support Engineer > > > > > > > > > >===================================================== > > > > >When responding to posts, please "Reply to Group" via your newsreader > > > > >so that others may learn and benefit from your issue. > > > > > > > > > >For SBS 4.5 issues, post to: microsoft.public.backoffice.smallbiz > > > > >For SBS 2000 issues, post to: > microsoft.public.backoffice.smallbiz2000 > > > > >For SBS 2003 issues, post to: microsoft.public.windows.server.sbs > > > > >===================================================== > > > > >This posting is provided "AS IS" with no warranties, and confers no > > > rights. > > > > ></BODY> > > > > > > > > Jim B. SBS MVP > > > > remove the mvp to send email > > > > > > > > > > > >
- Next message: Henry Craven: "Re: Public folders to be seen in companyweb"
- Previous message: Henry Craven: "Re: Help! SBS shutdown and restart when it want!!!"
- In reply to: Andrew H: "Re: Terminal services and login interactively policy"
- Next in thread: Jeff Middleton [SBS-MVP]: "Re: Terminal services and login interactively policy"
- Reply: Jeff Middleton [SBS-MVP]: "Re: Terminal services and login interactively policy"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|