Re: Users can't use terminal services !!!

OK, the problem is that the TS is running on a DC. This is *not*
recommended, for both security and performance reasons.
You are allowing your users to use your DC as their personal
workstation, with very few possibilities to lock the server down.

If you want to continue with this setup, you will also have to give
the users the user right to "Logon locally" in your Default Domain
Controller Security Policy.
_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

=?Utf-8?B?UGF1bG8gU291c2E=?=
<PauloSousa@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote on 26 jun 2006 in
microsoft.public.windows.terminal_services:

Thanks for your reply!

Yes, this TS is a domain controller.

The right is set in users account properties.

And I can't find in any of the policies the "Log on through
Terminal
Services" right.

thanks again.
Paulo Sousa

"Vera Noest [MVP]" wrote:

This user right can be found in the user account properties in
AD, on the "Terminal Services profile" tab.

It can also be set in your Default Domain Policy, under
Windows Settings - Security Settings - Local Policies - User
rights Assignments
"Log on through Terminal Services"

Did you add your users to the *local* Remote Desktop Users
group on the Terminal Server (as opposed to the domain wide
Remote Users group)?
This TS is not a Domain Controller, is it?
_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

=?Utf-8?B?UGF1bG8gU291c2E=?= <Paulo
Sousa@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote on 26 jun 2006 in
microsoft.public.windows.terminal_services:

Hello, I've installed Terminal Services on a Windows 2003
R2, and
purchased CAL licenses for the Terminal services server and
activated them.

But now I'm stuck on the message "The user doesn't have
permission to
logon to terminal services", something like this, and "Add
user to group Remote desktop users".

I've added the users to the "Remote desktop users" group,
but still
nothing, not even the Administrator can logon to terminal
services.

I think it's a problem with policies, because I can't find
the policie
for the right to logon remotly to the server.

Thanks for any help
Paulo Sousa
.

Relevant Pages

  • Re: Windows Server 2008 TS Error.
    ... I use any other method to achieve the same.It is security breach and any ... Microsoft MVP - Terminal Services ... How can i prevent users from accessing drives of WIN2K8 server.?? ... members of the Remote Desktop Users group have this ...
    (microsoft.public.windows.terminal_services)
  • Re: Can not log into my terminal server - logon error
    ... connection through the terminal services configuration. ... If you just type "mstsc", or you use the Remote Desktop Client, ... your users must be members of the local ... build-in group "Remote Desktop Users" on your Terminal Server. ...
    (microsoft.public.windows.terminal_services)
  • Re: Problem logging onto TS via RWW
    ... locally" and "Allow log on through Terminal Services" on the local Security ... Policy on the terminal server box as I requested in my previous post. ... Remote Desktop Users Group. ...
    (microsoft.public.windows.server.sbs)
  • Re: how to secure terminal server, no software installation, and etc
    ... Your Terminal Services Security Website ... > MCSE, CCEA, Microsoft MVP - Terminal Server ... >> Server machine account to the security list of the GPO (keep the ...
    (microsoft.public.windows.terminal_services)
  • Re: Windows Server 2008 TS Error.
    ... there is a way to prevent users access to the local drives and that is through group policy. ... TRULY concerned about security you'll buy another server and NOT let your users on the domain controller to begin with. ... Microsoft MVP - Terminal Services ... add the users to the Remote Desktop User group that is local to the terminal server. ...
    (microsoft.public.windows.terminal_services)