Re: Users can't use terminal services !!!

OK, the problem is that the TS is running on a DC. This is *not*
recommended, for both security and performance reasons.
You are allowing your users to use your DC as their personal
workstation, with very few possibilities to lock the server down.

If you want to continue with this setup, you will also have to give
the users the user right to "Logon locally" in your Default Domain
Controller Security Policy.
_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

=?Utf-8?B?UGF1bG8gU291c2E=?=
<PauloSousa@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote on 26 jun 2006 in
microsoft.public.windows.terminal_services:

Thanks for your reply!

Yes, this TS is a domain controller.

The right is set in users account properties.

And I can't find in any of the policies the "Log on through
Terminal
Services" right.

thanks again.
Paulo Sousa

"Vera Noest [MVP]" wrote:

This user right can be found in the user account properties in
AD, on the "Terminal Services profile" tab.

It can also be set in your Default Domain Policy, under
Windows Settings - Security Settings - Local Policies - User
rights Assignments
"Log on through Terminal Services"

Did you add your users to the *local* Remote Desktop Users
group on the Terminal Server (as opposed to the domain wide
Remote Users group)?
This TS is not a Domain Controller, is it?
_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

=?Utf-8?B?UGF1bG8gU291c2E=?= <Paulo
Sousa@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote on 26 jun 2006 in
microsoft.public.windows.terminal_services:

Hello, I've installed Terminal Services on a Windows 2003
R2, and
purchased CAL licenses for the Terminal services server and
activated them.

But now I'm stuck on the message "The user doesn't have
permission to
logon to terminal services", something like this, and "Add
user to group Remote desktop users".

I've added the users to the "Remote desktop users" group,
but still
nothing, not even the Administrator can logon to terminal
services.

I think it's a problem with policies, because I can't find
the policie
for the right to logon remotly to the server.

Thanks for any help
Paulo Sousa
.

Relevant Pages

  • Re: Can not log into my terminal server - logon error
    ... connection through the terminal services configuration. ... If you just type "mstsc", or you use the Remote Desktop Client, ... your users must be members of the local ... build-in group "Remote Desktop Users" on your Terminal Server. ...
    (microsoft.public.windows.terminal_services)
  • Re: Problem logging onto TS via RWW
    ... locally" and "Allow log on through Terminal Services" on the local Security ... Policy on the terminal server box as I requested in my previous post. ... Remote Desktop Users Group. ...
    (microsoft.public.windows.server.sbs)
  • Re: how to secure terminal server, no software installation, and etc
    ... Your Terminal Services Security Website ... > MCSE, CCEA, Microsoft MVP - Terminal Server ... >> Server machine account to the security list of the GPO (keep the ...
    (microsoft.public.windows.terminal_services)
  • Re: Centrally control Terminal Services logon rights
    ... When a user tries to logon to log on using the Terminal Services client they ... "You do not have access to logon to this session. ... "Terminal Services has a default connection security setting allows only ... > want this particular user to be able to logon to the Terminal Server. ...
    (microsoft.public.win2000.active_directory)
  • Re: Disable Remote Desktop - Enable Terminal Services
    ... the 2 user Remote Desktop is always in the way as the ... so installing Terminal Server on 2003 assumes Application ... >> terminal server mode: administration or application server. ... Terminal Services is activated by Microsoft. ...
    (microsoft.public.windows.terminal_services)