Re: Allowing non administrative console logon

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Neplitude (nicola_at_iafrica.com)
Date: 03/26/05

  • Next message: Arnaud: "RE: Application hang when a user run Windows Explorer on a shared fold" 
    Date: Sat, 26 Mar 2005 14:01:48 +0200

    Everything seems on track except for the following:
    1. Go into your Terminal Server Configuration Console
    2.Click on connection and then in the right hand pane, double click on the
    rdp-tcp connection.
    3.Click on permissions
    4. Add your specific user accordingly and assign him/her full access rights
    (This will basically give him the ability to logoff, disconnect, and query
    rdp session information)
    5. Give the user the ability to logon on locally (Which you have done
    already)

    By adding the user to the "allow logon through terminal services" funny
    enough does not give them specific logon access onto the server. The
    preferred method would be the above.

    Try it out and let me know what happens

    Nep

    "[Greuuh]" <greuuh@SPAMGOHOMEfree.fr> wrote in message
    news:4245342f$0$32223$626a14ce@news.free.fr...
    > Hello,
    >
    > First of all, my configuration will seem to be a bit weird to you but...
    > it is as this.
    >
    > I'm running a console application as a service on a Win2k3 domain
    > controler. So we can actually only see this application's window when we
    > logon to the server's console. If we connect to a classical TS session,
    > the application is running but as a background service.
    >
    > My issue is that I must grant a group the rights to logon to this DC's
    > console through Terminal Server so they can connect to the server's
    > console without beeing Domain Administrators (this is a DC).
    >
    > Wandering in the newsgroups, I found solutions to allow them to connect
    > remotely on a classical TS session and to allow local logons to this group
    > :
    > In the default domain controler policy, I granted them the right to logon
    > through terminal services and to logon locally.
    > I did grant them the right on the RDP connection (Terminal Services
    > config)
    >
    > But I still have the "You do not have access to logon this session" when I
    > try to connect them throught "mstsc /console"
    >
    >
    > Could anybody help?
    >
    >
    > Thanks

  • Next message: Arnaud: "RE: Application hang when a user run Windows Explorer on a shared fold"

    Relevant Pages

    • Re: Terminal Session Information on Console
      ... Server 2000 Terminal Services for review the rdp information connection ... connection that is started with a rdp client. ... console session, a disconnected session, a listener. ...
      (microsoft.public.windows.terminal_services)
    • Re: RDC and the Console Mode.
      ... Allow Logon Locally allows logon to the physical console or via ... > Users who are trying to log on at the console of a Microsoft Windows-based ... > Users who use a Remote Desktop connection or Terminal Services must have the ... It means a Remote Session, ...
      (microsoft.public.windows.terminal_services)
    • Allowing non administrative console logon
      ... I'm running a console application as a service on a Win2k3 domain ... My issue is that I must grant a group the rights to logon to this DC's ... In the default domain controler policy, I granted them the right to ... I did grant them the right on the RDP connection (Terminal Services config) ...
      (microsoft.public.windows.terminal_services)
    • No logon. BSOD 0x0000001E
      ... neither with Terminal Services or console. ... logon it show a BSOD 0x0000001e kmode_exception_not_handled. ...
      (microsoft.public.win2000.general)
    • Re: Cannot login as ordinary user to console session on Windows Server 2003 Standard SP1
      ... After connecting and entering correct user name and password I get the dialog box which says "To log on to this remote console session, you must have administrative permissions on this computer." ... RDP to the already logged on session, the connection succeeds. ... "Remote Desktop Users" group, and is not a member of "Administrators" group. ... Default Domain Security Policy / Security Settings / Local Policies / User Rights Assignment / Allow logon through terminal services. ...
      (microsoft.public.windows.server.general)