RE: Users must be Administrators to log on to terminal services?

From: Emily (Emily_at_discussions.microsoft.com)
Date: 12/10/04 

Date: Fri, 10 Dec 2004 14:41:02 -0800

My permissions for Documents and Settings are as follows:

Administrators (LOCALMACHINE\Administrators): Full Control
Everyone: Read & Execute, List Folder Contents, Read
Power Usres (LOCALMACINE\Power Users): Read & Execute, List Folder Contents,
Read
SYSTEM: Full Control
Users (LOCALMACHINE\Users): Read & Execute, List Folder, Contents, Read

Do I need to have the Remote Desktop Users group in that list..? All users
are members of both User And Remote Desktop Users.

Thanks for any assistance!
-- Emily

"Matthew Harris [MVP]" wrote:

> It sounds like the permissions on the profile folders aren't quite right.
> The users should have read permissions on the documents and settings folder.
>
> -M
>
> "Emily" wrote:
>
> > Hello, we are running a terminal server on a stand alone Win 2003 server
> > machine (not sure if that is the correct terminology, but I mean its not on a
> > domain and our users are not managed with active directory).
> >
> > Our problem is that if a user who is a member of both the User and Remote
> > Desktop Users group (with default settings) attempts to login via RDP they
> > receive the error message:
> >
> > "Windows cannot find the local profile and is logging you on with a
> > temporary profile. Changes you make to this profile will be lost when you log
> > off. Possible causes of this error include network problems or insufficient
> > security rights. If this problem persists, contact your network
> > administrator. "
> >
> > If they log in as an Administrator they are fine, so I'm thinking its a
> > permission issues, but as far as I can tell permissions look ok.
> >
> > I was hoping someone might be able to tell me what I need to set and where
> > to allow non-administrator users to connect? Thanks!
> >
> > -- Emily

Relevant Pages

  • Re: Issue with SecurityPermission
    ... The following sample shows how to create a user control which can be ... downloaded and executed with specific permissions. ... > The default security policy for assemblies downloaded from an intranet-based> URI is different than that of the local system. ... >> This results in no one being able to execute the application from that ...
    (microsoft.public.dotnet.security)
  • RE: ERROR?: Service Control Manager 3221229584
    ... This may be due to permissions on the DTC files. ... Administrators - Full Control ... Authenticated Users - Read & Execute, ...
    (microsoft.public.windows.server.sbs)
  • Re: Profiles not being created on new logons
    ... Yes the user can logon fine and never gets any error messages. ... Administrators=Full Control ... Power Users=Read & Execute, List Folder Contents, and Read ...
    (microsoft.public.windowsxp.general)
  • Re: Restricting Certain Binaries - Steve?
    ... ntfs/share permissions, eliminating unnecessary services, etc. ... administrators group from the "access this computer from the network" user right ... I don't know exactly how an attacker or worm gets system control. ... > execute any of these binaries from my desktop. ...
    (microsoft.public.win2000.security)
  • Re: full control
    ... Full control means the ability to read, write, execute, modify, just what ... Modify is ability for others to modify your files. ... Special Permissions Full Control Modify Read & Execute List Folder ...
    (microsoft.public.win2000.networking)