Re: RWW and Remote desktop stopped working on all clients

Resolved. After diggin through ALL the group policies, I found Remote
Desktop DISABLED under the Account Lockout policy - I don't think I've even
LOOKED at that polilcy since setting up the domain almost 2 years ago. So I
removed that entry, and explicitly allowed Remote desktop under the Firewall
policy and that seems to have fixed it.

Now to find out who has been messing with things they don't know anythign
about - to the best of my knowledge only myself and the company owner have
the admin password - which yes, I already changed. Bastages.

Thanks Susan and Cris for your help - MUCH appreciated! Hope I didn't waste
your time, it never occured to me someone would be playing with the policy
editor <fuming>

SusanV


"Susan Bradley" <sbradcpa@xxxxxxxxxxx> wrote in message
news:Oxpd6IxTJHA.4180@xxxxxxxxxxxxxxxxxxxxxxx
SusanV wrote:
Thanks, but I really don't think this is relevant, as users can navigate
the RWW site with no trouble, select options, use OWA via RWW site, and I
can use RWW to connect to any server whether logged in as the the
adminsitrator or another account with Domain Admin role; also the server
is SBS 2003.

Digign a bit deeper, I checked teh firewall exceptions list, and Remote
Desktop is NOT checked, and greyed out, and Yes by policy. However, I'm
fairly certain it's always been this way, as I haven't used the group
policy editor to make any changes in months, and no one else has to my
knowledge...


"Cris Hanna [SBS MVP]" <crisnospamhanna@xxxxxxxxxxxxxxxxxxxxx> wrote in
message news:uK87j7wTJHA.1332@xxxxxxxxxxxxxxxxxxxxxxx
Susan
You might want to see if this is what your getting
http://blogs.technet.com/11/archive/2008/11/07/browse-remote-web-workplace-from-windows-xp-sp3-machine.aspx


--
Cris Hanna [SBS - MVP]
Co-Author, Windows Small Business Server 2008 Unleashed
http://www.amazon.com/Windows-Small-Business-Server-Unleashed/dp/0672329573/ref=pd_bbs_sr_1?ie=UTF8&s=books&qid=1217269967&sr=8-1
------------------------------------
MVPs do not work for Microsoft
Please do not submit questions directly to me.

"SusanV" <s@xxxxx> wrote in message
news:uUMB93wTJHA.5920@xxxxxxxxxxxxxxxxxxxxxxx
Thanks Cris for helping!

XP SP3 went out via WSUS about 2 weeks ago. The only update applied
since 11/13 was the XML Core Services SP2, and that went out last
night. (This update stays it's not removable - I hope this could not
have somthign to do with it?)

Recent changes:
The win2003 server was just added last Friday as a member server,
static IP. On MOnday morning I saw that it kept losing the default
gateway setting from the router to SBS's IP, and I found an article
stating that the SBS login script would do this, so I changed the
administrator account to not use that script. That problem was solved.
Domain Users still use the sbs login script, which has not been changed
except for a drive mapping. The first client reported to have the
trouble I have not logged on to as admin in several weeks, and the user
connected via RWW just last week (Thursday or Friday)

Something went belly up and I jsut can't seem to pinpoint it. I *did*
find ONE machine I was able to connect to via RDP, logged in as admin,
and almost immediately the connection dropped so I'm suspecting the
login script for Administrator not using SBS_LOGIN_SCRIPT.bat - I
removed the line \\LSGSBS\Clients\Setup\setup.exe /s LSGSBS from a copy
of SBS_LOGIN_SCRIPT.bat and set teh admin account to use that. however,
after loggin in to the workstation that initially reported teh problem
using a normal user account, I still am unable to connect to the client
via RDP.

The remaining lines in the login script:

NET USE U: \\LSGSBS\Users
NET USE P: \\LSGSBS\Public
netsh firewall set service REMOTEADMIN enable
echo logon %username% %computername% %date% %time% %sessionname% >>
\\lsgsbs\e$\Audit_Logs\logon.log

As I said earlier I can connect to any of the servers either via RWW
or RDP, but no clients.

Thanks again,
Susan







"Cris Hanna [SBS MVP]" <crisnospamhanna@xxxxxxxxxxxxxxxxxxxxx> wrote in
message news:u4SKYnwTJHA.3492@xxxxxxxxxxxxxxxxxxxxxxx
Was XP SP3 just applied to these workstations?

--
Cris Hanna [SBS - MVP]
Co-Author, Windows Small Business Server 2008 Unleashed
http://www.amazon.com/Windows-Small-Business-Server-Unleashed/dp/0672329573/ref=pd_bbs_sr_1?ie=UTF8&s=books&qid=1217269967&sr=8-1
------------------------------------
MVPs do not work for Microsoft
Please do not submit questions directly to me.

"SusanV" <s@xxxxx> wrote in message
news:%23Nb%23KfwTJHA.1164@xxxxxxxxxxxxxxxxxxxxxxx
Rebooted the server this morning because I had a hung USB drive, and
since rebooting NONE of the client computers (all XP Pro SP3)will
accept a connection either externally via RWW or internally via
Remote Desktop. The servers are fine (SBS 2003 R2, Win2003 and
Win2000). I haven't changed anythign in group policies, DHCP, Wins,
nothing. Can ping clients, can manage remotely from My
computer>>connect to another computer, can see shares. Only RDP and
RWW are broken.

Any ideas? Again, this is ALL clients, and a real problem as I have
several users who need RWW access.

Please help!

Susan




Some services may not start or may not work correctly on a computer that
is running Windows SBS after you install the DNS Server security update
953230 (MS08-037):
http://support.microsoft.com/kb/956189/

I'm thinking maybe that?


.

Relevant Pages

  • RE: HELP!!!!
    ... I understand that users can not logon to the SBS ... server computer side) or when users logon the server using Remote Desktop ... The error "The local policy of this system does not permit you to log on ...
    (microsoft.public.windows.server.sbs)
  • Re: How to allow users to create groups and shares
    ... policy and on a existing or new created policy for the member servers. ... Filtering: Not Applied ... Allow remote desktop connections ... check with GPMC on the server or from a client the policy settings. ...
    (microsoft.public.windows.server.active_directory)
  • Re: IIS 6 Directory Services Mapping ACL Problems
    ... It would appear that you can not delegate Certificate based credentials. ... IIS does not have the user's password, so it can't just logon to the remote ... file server as the user directly. ... Lastly - if you want to see what account is being used to access the remote ...
    (microsoft.public.inetserver.iis.security)
  • Re: asp.net remote [hosted] configuration usse
    ... That includes machine admin rights. ... to manipulate the that one site, one of many on a remote PC running Win2k3. ... The FrontPage Server Extensions Access Method ... Create an account on the remote Web Server. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Terminal Server logon problem
    ... I upgraded our current SBS 2003 box to new hardware using SBSMigration.com's ... When it was time to bring the old SBS server offiline and make ... I am getting a group policy error - You do not have permissions to ... The only thing I thought I changed was taking the administrators account ...
    (microsoft.public.windows.server.general)