Re: Trouble Accessing Terminal Services via Citrix

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Guy - I got it to work!! I read a cross post from another user who was
having similar issues, and Dragos CAMARA mentioned the following, which
worked. Thanks again...

The remedy was to go into the advanced settings of the ica-tcp listener, and
remove the only launch published applications setting.

Open the Citrix Connection Configuration Tool.
C:\Program Files\Citrix\System32\mfcfg.exe
Double Click on ica-tcp
Then click Advanced…
Then Under “Initial Program”
Clear the checkbox for “Only Launch Published Applications”



"azevon" wrote:

Thanks for sticking with me on this Guy.

The user is in the following groups:

Anonymous (just added him to this just to try)
Remote Desktop Users
Users

RDP client is version 6.0.6000.16386 for XP
And on the citrix side it's version 7.10.500

I have tried from 2 different machines with the same results. Here are the
exact 2 popups that appear:

"The desktop you are trying to open is currently available only to
administrators. Contact your administrator to confirm that the correct
settings are in place for your client connection"

AND

"To log on to this remote computer, you must have Terminal server User
Access permissions on this computer. By default, members of the Remote
Desktop Users group have these permissions. If you are not a member of the
Remote Desktop Users group or another group that has these permissions, or if
the Remote Desktop User group does not have these permissions, you must be
granted these permissions manually."

When you say restrictive rights configured on the session in the TS comfit
or Citrix comfit, do you mean TS Configuration Manager? If so, the ICA-tcp
uses client-provided logon information, the sessions tab has nothing checked
(I even tried before checking them all), the environment tab has the second
option checked (run initial program specified by user profile and Remote
Desktop Connection or TS client), the Permissions tab has remote Desktop
Users with user and guest access (even tried full), LOCAL SERVICE groups with
a dimmed special permissions check, same with NETWORK SERVICE, and the client
settings tab has Use Connection Settings from User Setings checked.

Here are the event viewer errors that I can see:

Event Type: Success Audit
Event Source: Security
Event Category: Account Logon
Event ID: 680
Date: 2/1/2007
Time: 8:11:57 AM
User: CITRIX2\acashdollar
Computer: CITRIX2
Description:
Logon attempt by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Logon account: acashdollar
Source Workstation: CITRIX2
Error Code: 0x0

AND

Event Type: Information
Event Source: Application Popup
Event Category: None
Event ID: 26
Date: 2/1/2007
Time: 8:11:57 AM
User: N/A
Computer: CITRIX2
Description:
Application popup: Connection Error : The desktop you are trying to open is
currently available only to administrators. Contact your administrator to
confirm that the correct settings are in place for your client connection.

AND

Event Type: Error
Event Source: TermServDevices
Event Category: None
Event ID: 1111
Date: 2/1/2007
Time: 8:02:13 AM
User: N/A
Computer: CITRIX2
Description:
Driver WebEx Document Loader required for printer WebEx Document Loader is
unknown. Contact the administrator to install the driver before you log in
again.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 12 0d 00 00 ........


-andy-




"guyyardeni" wrote:

What groups is the user a member of? what version of the RDP client are you
testing with? Have you tried connecting from multiple client machines? Sorry
for the general questions, but I want to make sure I'm not assuming anything
that might be contributing to the issue.
Are there any restrictive rights configured on the session in the TS comfit
program (or Citrix comfit)?
Check if there are any related event log messages that provide more
information.


--
Guy Yardeni



"azevon" <azevon@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:48B460BB-8AC8-4F95-B15E-BC022CC65795@xxxxxxxxxxxxxxxx
Yes - this user is a member of the remote desktop users group (you
mentioned
local remote desktop users group - there is only 1, correct?) The local
security policy (as well as the group security policy) have the correct
rights to use TS.

I can't give the verbatim error message as I have just disconnected myself
from that server and can't get back in until tomorrow AM EST. But 2 pop
ups
come up - the first is something about the user not being to connect to
the
desktop because of the right permissions. The second window (which pops
up
behind this one) mentions that this user doesn not have permission for TS
and
that I need to add them to the remote desktop user group.

Now what I don't understand is how the admin can connect with no troubles.
And the remote desktop users group, which has all the appropriate rights
can't. Just makes no sense. Why would I be able to successfully conenct
using this user account when I'm physically at the server but not
remotely?

"guyyardeni" wrote:

So the users are members of the local Remote Desktop Users group or not?
I would also check the local security policy to make sure that the group
is
granted the right to log on using terminal services.
What is the exact error? are there any event log messages?

--
Guy Yardeni



"azevon" <azevon@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:C3F45CC5-B90C-4F1A-BC73-8FF077C6158C@xxxxxxxxxxxxxxxx
Hi Guy - unfortunately this is not a domain member server. Any other
thoufhts?

"guyyardeni" wrote:

Make sure to add the users to the LOCAL Remote Desktop Users group if
this
is a domain member server.

--
Guy Yardeni



"azevon" <azevon@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:813D98D9-8B85-43C5-84D0-D70CA6B08ACB@xxxxxxxxxxxxxxxx
I forgot to mention that if I log on as that particular user in the
Remote
Users Desktop group AT the server console (I guess that would bne
locally), I
can get in. It's when I use either the remote desktop or citrix
client.
Not
sure if that helps at all...

thanks again, Andy

"azevon" wrote:

Greetings All,

Please don't automatically delete this post due to the word Citrix
in
the
Subject!! But I'm pretty sure at this point it's a MS server
setting
that I
might be missing.

I have a brand new Windows2003 server setup running Citrix
MetaFrame
3.0.
I
can easily log on via a citrix client (using a Mac OSX machone) IF
that
user
has admin rights. If he doesn't, I get the familiar "you must have
terminal
server usrs access permissions on this computer..." I have
verified
in
every
which way that I have included this user in Remote desktop users
group
and
that this group has the appropriate rights. I have also verified
via
MS
TID
278433 and done all that it says. If i add this user to the admin
group,
boom, they are in. So I know it's not a Citrix issue, but rather a
MS
rights
issue.

Any help would be greatly appreciated!!

-andy-






.

Relevant Pages

  • Re: Terminal Services Rights
    ... Is Terminal Services running on a Domain Controller? ... User access permissions on this computer. ... the Remote Desktop Users group have these permissions. ...
    (microsoft.public.windows.terminal_services)
  • Re: Group Policy and Security Settings Missing
    ... Win2k3 Domain ... Desktop Users group have these permissions. ... Remote Desktop Users Group or another group that has these permissions, ...
    (microsoft.public.windows.server.active_directory)
  • Group Policy and Security Settings Missing
    ... We recently Promoted a Windows 2003 SP1 domain controller in a exisiting ... Desktop Users group have these permissions. ... Remote Desktop Users Group or another group that has these permissions, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Terminal Services Rights
    ... User access permissions on this computer. ... the Remote Desktop Users group have these permissions. ... RDP, but now I'm getting the message list in the post. ...
    (microsoft.public.windows.terminal_services)
  • Re: Trouble Accessing Terminal Services via Citrix
    ... Remote Desktop Users ... RDP client is version 6.0.6000.16386 for XP ... Desktop Users group have these permissions. ...
    (microsoft.public.windows.terminal_services)