Re: Can't Logon



On Apr 30, 11:45 pm, v-rob...@xxxxxxxxxxxxxxxxxxxx (Robert Li [MSFT])
wrote:
Hi Chad,

Thanks for posting in our newsgroup and also for Robert's input.

From your description, I know that your client cannot logon your Terminal
Server and get the error message "user must be part of the Remote Desktop
Users Group" If I am off-base, please don't hesitate to let me know.

Please take the following steps to see if the problem can be resolved:

Step 1: Chick if the problematic user is in the Remote Web Workplace Users
group.

Step 2: Please try running the Change User Permissions wizard to apply a
user template to the user.

Note: Suppose this user is domain user.

1. Open Server Management and click Users.
2. Click Change User Permission and then click Next.
3. Click User Template, select "Replace any previous permissions granted to
the uses", and then click Next.
4. Click problematic user account, click Add,
5. Click Next and then click Finish.
6. Please check again.

Step3: Check Default Domain Policy

1. Please run gpmc.msc command.
2. Right click Default Domain Policy and click Edit.
3. Migrate to Computer Configuration -> Windows Settings ->
Security Settings -> Local Policies -> User Rights Assignment- "Allow logon
through Terminal Services". Then add the problematic user in the list.
4. Run gpupdate /force on the client and try again.

Step 4: Configuration on the TS server.

To set custom Terminal Services connection permissions:

1. Click Start, point to Programs, point to Administrative Tools, and then
click Terminal Services Configuration.
2. Open the Connections folder.
3. Right-click the connection (RDP-TCP), and then click Properties.
4. On the Permissions tab, add the specific user that needs access to this
connection.
5. Click OK and then try again.

Hope the information helps.

If the problem persists, please help me collect the following information
for further research:

Collect Screen shot of the error massage and sent to v-rob...@xxxxxxxxxxx
with subject: 38987088-Can't Logon.

I am looking forward to hear from you.

If you need further assistance, please don't hesitate to let me know.

Best regards,

Robert Li(MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! -www.microsoft.com/security

=====================================================

This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
checkhttp://support.microsoft.comfor regional support phone numbers.

Any input or comments in this thread are highly appreciated.

=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
<From: "Robert L [MVP - Networking]" <nore...@xxxxxxxxxxx>
<References: <1177981184.707848.147...@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
<Subject: Re: Can't Logon
<Date: Mon, 30 Apr 2007 04:22:04 -0500
<Lines: 102
<MIME-Version: 1.0
<Content-Type: multipart/alternative;
< boundary="----=_NextPart_000_0021_01C78ADF.1B48BB80"
<X-Priority: 3
<X-MSMail-Priority: Normal
<X-Newsreader: Microsoft Outlook Express 6.00.2900.3028
<X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3028
<Message-ID: <OWJzXC5iHHA.3...@xxxxxxxxxxxxxxxxxxxx>
<Newsgroups: microsoft.public.windows.server.sbs
<NNTP-Posting-Host: c-24-12-156-204.hsd1.il.comcast.net 24.12.156.204
<Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP04.phx.gbl
<Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:33701
<X-Tomcat-NG: microsoft.public.windows.server.sbs
<
<Is this server also DC? This troubleshooting may help,
<You must be granted the allow log on through TSIf you are not a member of
the Remote Desktop Users group or another group ... or if the Remote
Desktop User Group does not have this right, you must be ...
< http://www.chicagotech.net/RemoteAccess/ts15.htm
<Bob Lin, MS-MVP, MCSE & CNE
<Networking, Internet, Routing, VPN Troubleshooting onhttp://www.ChicagoTech.net
<How to Setup Windows, Network, VPN & Remote Access onhttp://www.HowToNetworking.com
< "chad" <slidellinternatio...@xxxxxxxxx> wrote in messagenews:1177981184.707848.147550@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
< I know this is a Terminal Services question, but I think that being
< that I have an SBS 2003 DC it makes a difference.
< I have one user that cannot log onto our Terminal Server. I look at
< his permissions and memberships in AD, and they are EXACTLY the same
< as the folks that can logon. Yet I keep getting the message that the
< user must be part of the Remote Desktop Users Group. The user is a
< part of this group. The server was upgraded from SBS 2000 so maybe
< this has something to do with it. Can anyone help?
<

It's not a DC. The strange thing is that I made those changes, and now
not even the administrator can log on without that same message coming
up!

.



Relevant Pages

  • Re: Bad login alerts
    ... Logon Failure: ... One of the most active is the Microsoft ... Please run the command on the server named DOC-MAIL ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • RE: SBS 2003 - Admin Account Locked Out
    ... Thank you for posting to the SBS Newsgroup. ... I understand that after a restart, the administrator account cannot logon ... Product Support Services via telephone for the quickest solution and the ... 2> You can access this computer (server) from the network. ...
    (microsoft.public.windows.server.sbs)
  • RE: SBS Logon screen
    ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ... <Thread-Topic: SBS Logon screen ... I mapped a drive on a client PC to the C$ & D$ of the server and copied ...
    (microsoft.public.windows.server.sbs)
  • Re: ATTN : Microsoft - Security Event 529....Second Request for help....
    ... you need not collect the netlogon log on the server box. ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ... System Attendant service' logon on account is "Local System Account", ...
    (microsoft.public.windows.server.sbs)
  • Re: Question regarding TS on a member server
    ... how can they logon to the TS server? ... > Since the Remote Desktop Users group exist locally on the TS ...
    (microsoft.public.windows.terminal_services)