Re: Had to add Administrator to Remote Desktop Users group to use
- From: Helge Klein <Helge.Klein@xxxxxxxxxxxxxx>
- Date: Tue, 12 Jun 2007 00:16:47 -0700
Login through terminal services is governed by security in two places:
- Permissions on the RDP listener
- Security option (mentioned by you): Allow/Deny through terminal
services
The group Remote Desktop Users is just a shortcut for configuring
those. You should check the settings that are in effect on your DC.
I hope this helps.
Helge
On 11 Jun., 21:29, bfessenden <bfessen...@xxxxxxxxxxxxxxxxxxxxxxxxx>
wrote:
Sorry - I forgot to specify that:
I get the standard "To logon to this remote computer, you must be granted
the Allow log on through Terminal Services right..." that you would get with
a regular user not in the RDU's group.
Bret
"Helge Klein" wrote:
What error message do you get when trying to TS into the DC and the
admin account used is _not_ a member of the Remote Desktop Users?
Helge
On 11 Jun., 19:08, bfessenden <bfessen...@xxxxxxxxxxxxxxxxxxxxxxxxx>
wrote:
Hi,
I just setup a new domain with one new domain controller running Windows
2003 R2 SP2. I have made no changes, aside from password policy to any GPO,
and I have added no new GPOs.
After connecting a existing terminal server as a member server to the new
domain, I could no longer RDC in with any administrator account to the
*domain controller*.
I did have to add Domain Users to the local Remote Desktop Users group on
the terminal server, and they can login to the terminal server fine. I can
also login as an administrator (either local or domain) to the terminal
server ok.
But I cannot login as an administrator to the DC, unless I add the
administrator to the Remote Desktop Users group on the DC.
I haven't been able to find any info about this, because all my searches
just end up being explanations about how to make a regular user a member of
Remote Desktop Users.
I also have not tried to implement any GPO's to "Allow login through
Terminal Services", etc., because I have never done that with any of my other
domain controllers, and I have always been able to login as an admin with no
problem (assuming the System Properties "Allow users to connect remotely" has
been checked on the DC).
Have I just mis-configured something, or is my brand new DC having a serious
issue? I wouldn't worry, except that Microsoft specifically says not to add
admins to the RDU's group.
Any help would be appreciated. Thanks.
Bret
.
- Follow-Ups:
- Re: Had to add Administrator to Remote Desktop Users group to use
- From: bfessenden
- Re: Had to add Administrator to Remote Desktop Users group to use
- References:
- Re: Had to add Administrator to Remote Desktop Users group to use RDC.
- From: Helge Klein
- Re: Had to add Administrator to Remote Desktop Users group to use RDC.
- Prev by Date: Re: incoming user IP address
- Next by Date: Re: unable to contact license service
- Previous by thread: Re: Had to add Administrator to Remote Desktop Users group to use RDC.
- Next by thread: Re: Had to add Administrator to Remote Desktop Users group to use
- Index(es):
Relevant Pages
|
