Re: TS domain logins

Tech-Archive recommends: Fix windows errors by optimizing your registry



You have to add your users (or custom user group) to the *local*
Remote Desktop Users group on the Terminal Server. That's *not* the
Remote Desktop Users group in AD!

That's all. You do not have to give users the right to Logon
Locally (that's a W2K TS requirement, please take that right away
again), and you do not have to modify the rdp permissions, unless
you want users to have some special rights.
All necessary user rights are already predefined for members of the
*local* Remote Desktop Users group on the TS.

Check in the AD account properties - Terminal Services Profile tab
that the checkbox for "Deny this user permission to logon to any
TS" is unchecked (which it is by default).
_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

=?Utf-8?B?bWF0dHc=?= <mattw@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote on 07
dec 2006 in microsoft.public.windows.terminal_services:

Hi,

I have installed the TServer component on a W2K3 standard
install. I then configured an AD group that is a member of
Remote Desktop Users and added the domain user to the TS group.
This group was then added to the permission on the TS
Configuration. I have added it to the machine's local security
policy as allow local sign on etc.

When i connect to the server using RDP with the domain user name
and password I get:

"to log on to this remote computer, you must have terminal
server user access permissions on this computer. by default,
members of the remote desktop users group have these
permissions. if you are not a member of the remote desktop
users group that has these permission, or if the remote desktop
user group does not have these permissions, you must be granted
these permissions manually."

this is pretty frustrating as I have defined the access
permission everywhere I can think of. We have no cals and are
running on day TWO of the 120 day trial.

any ideas?

thanks,
matt
.



Relevant Pages

  • Cant logon to the remote computer but it seems like has the permissions
    ... Server User Access permissions on this computer. ... members of the Remote Desktop Users group have these ... If you are not a member of the Remote Desktop ... I also added the user in my Remote Desktop Users. ...
    (microsoft.public.windows.terminal_services)
  • Re: Cannot Log Remotely Being a Remote User
    ... Double-click "Allow log on through Terminal Services" ... Remote Desktop Users if it is in the list and click the ... Well, I hope my users group permissions are well assigned, How ... I am in the way to setup a mirroring server and I ...
    (microsoft.public.windows.terminal_services)
  • Terminal Server stopped working...
    ... To log on to this remote computer, you must have Terminal Server User Access ... permissions on this computer. ... If you are not a member of the Remote Desktop ... Users group or another group that has these permissions, ...
    (microsoft.public.windows.terminal_services)
  • Re: Question regarding TS on a member server
    ... the local Remote Desktop Users group on the TS has the ... necessary permissions on the rdp-tcp connection. ... MCSE,CCEA, Microsoft MVP - Terminal Server ...
    (microsoft.public.windows.terminal_services)
  • Re: Setup of new Windows 2003 Standard, Terminal Services
    ... TERMINAL SERVER USER, Administrators, Remote Desktop Users. ... "To log on to this remote computer, you must have Terminal Server User ... Desktop Users group have these permissions. ...
    (microsoft.public.windows.terminal_services)