RE: Question regarding TS on a member server

From: Feng Mao (fengmao_at_online.microsoft.com)
Date: 07/26/04 

Date: Mon, 26 Jul 2004 09:19:31 GMT

Hi Judge,

Thank you for posting!

Please take a look at Group Policy to see if it permits the three user
account to logon through Terminal Service.

1. Click Start, point to Run
2. Type GPEDIT.MSC and press Enter
3. Expand Local Computer Policy -> Computer Configuration -> Windows
Settings -> Security Settings -> Local Policies ->User Rights Assignment
4. On the right panel, double click Allow log on through Terminal Services
5. Make it sure that the three users or the group it belongs are listed.
6. Click Start point Run
7. Type "GPUPDATE /Force" (without quotation marks) and press Enter to
refresh group policy.

I hope that the above information is helpful. Have a nice day!

Thanks & Regards,

Feng Mao [MSFT], MCSE
Microsoft Online Partner Support

Get Secure! - www.microsoft.com/security

=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| From: Judge Dredd <123@123.com>
| Newsgroups: microsoft.public.windows.terminal_services
| Subject: Question regarding TS on a member server
| Date: Mon, 26 Jul 2004 00:24:17 -0400
| Organization: Posted via Supernews, http://www.supernews.com
| Message-ID: <ue19g05l2cmsuldv0tdgkoj61mpme140ja@4ax.com>
| X-Newsreader: Forte Agent 1.92/32.572
| MIME-Version: 1.0
| Content-Type: text/plain; charset=us-ascii
| Content-Transfer-Encoding: 7bit
| X-Complaints-To: abuse@supernews.com
| Lines: 23
| Path:
cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!news-out.cwix.com!newsfeed.cwix.co
m!news.maxwell.syr.edu!sn-xit-03!sn-xit-01!sn-post-01!supernews.com!corp.sup
ernews.com!not-for-mail
| Xref: cpmsftngxa06.phx.gbl
microsoft.public.windows.terminal_services:15599
| X-Tomcat-NG: microsoft.public.windows.terminal_services
|
| I'm testing a terminal server configuration before I launch it, and
| I'm having an issue with accounts: I have a test DC and a terminal
| server(member server), both running Standard Edition 2003 Evaluation
| copy (internet activated). I have user accounts set up on the DC,
| with 3 test users being given access to the remote desktup users
| group. (I gave them access thru the remote tab in system properties.)
| Yet when I log on remotely to the terminal server, it gives me the
| "local policy does not allow you to logon interactively" error
| message. I had to go into terminal server configuration and add the
| users on the permissions tab.
|
| I thought that this wasn't neccessary with 2003; you just had to add
| users to the group and they were in.
|
| Do I have something set up wrong between the two servers? Or is this
| the right way to do it?
|
| I want to eventually be able to give permissions using group policy
| and limit the profiles that way. I've decided to put the accounts on
| the DC with the actual user folders & profiles on the TS. Am I on the
| right track?
|
| Thanks!
|

Relevant Pages

  • Re: Multiple Applications on TS
    ... Why on earth would you want to maintain local accounts, ... MCSE, CCEA, Microsoft MVP - Terminal Server ... > server,the group policy is not in effect.Is group policy meant ...
    (microsoft.public.windows.terminal_services)
  • Re: how to apply different GPOs to same user?
    ... The solution here is to use some thing called Group Policy Loopback ... It takes the User Configuration Settings part from a GPO ... Locking Down Windows Server 2003 Terminal Server Sessions ... > We created group for terminal service users and added users from different> OUs to that group and filtered the gpo for this group. ...
    (microsoft.public.windows.server.active_directory)
  • Working with Groups within TS
    ... terminal server and have drop that terminal server into a secure OU. ... applied a group policy to that OU which consist of Computer and User ... I need to allow all these accounts to have access to the TS ... I have created a global group within my secure TS OU called "SecureTSUSers" ...
    (microsoft.public.windows.group_policy)
  • Working with Account, Groups and Group Policys?
    ... terminal server and have drop that terminal server into a secure OU. ... applied a group policy to that OU which consist of Computer and User ... I need to allow all these accounts to have access to the TS ... I have created a global group within my secure TS OU called "SecureTSUSers" ...
    (microsoft.public.windows.server.general)
  • Question on using Groups for TS
    ... terminal server and have drop that terminal server into a secure OU. ... applied a group policy to that OU which consist of Computer and User ... I need to allow all these accounts to have access to the TS ... I have created a global group within my secure TS OU called "SecureTSUSers" ...
    (microsoft.public.windows.terminal_services)